Troy Hunt

DECEMBER 4, 2021

More tweaking to be done and more work to be done on the office, but it's all coming together very nicely now 😎 References My new Elgato Key Lights are now up and running (beautifully made product and a massive improvement on before) I may have underestimated how much it costs to ship books around the world for #pwnedmas (but hey, it's (..)

Password Management 254

Password Management Data breaches Passwords 254

Troy Hunt

JANUARY 16, 2019

Collection #1 is a set of email addresses and passwords totalling 2,692,818,238 rows. In total, there are 1,160,253,228 unique combinations of email addresses and passwords. This is when treating the password as case sensitive but the email address as not case sensitive. There are 21,222,975 unique passwords. It'll be 99.x%

Data breaches 280

Data breaches Passwords Password Management Accountability 280

Troy Hunt

NOVEMBER 28, 2021

I've aged) I'm sending out the #pwnedmas swag and there's still plenty of time to enter (just sign up for the free preview of my book and you're in) Sponsored by: 1Password is a secure password manager and digital wallet that keeps you safe online.

Password Management 267

Password Management IoT Passwords 267

Troy Hunt

FEBRUARY 26, 2021

There's probably some hints in the range of different things I'm speaking about this week and the book is certainly now consuming a heap of time, but at least I'm doing what I love. yes, it's childish and no, I don't care) Sponsored by: 1Password is a secure password manager and digital wallet that keeps you safe online.

Password Management 230

Password Management IoT Passwords 230

Troy Hunt

MARCH 29, 2018

The penny first dropped for me just over 7 years ago to the day: The only secure password is the one you can't remember. In an era well before the birth of Have I Been Pwned (HIBP), I was doing a bunch of password analysis on data breaches and wouldn't you know it - people are terrible at creating passwords! Everywhere.

Password Management 265

Password Management Passwords Data breaches Retail 265

Troy Hunt

SEPTEMBER 17, 2021

("Facebook confirmed that this is the authentic profile for this public figure") This is a great thread looking inside the Epik breach data ("anonymisation" is often useless once source data is exposed) The book is almost done!

Password Management 267

Password Management Passwords Authentication 267

Troy Hunt

NOVEMBER 27, 2022

because it's a holiday in America, we've made my book cheaper 😊) Sponsored by: 1Password, a secure password manager, is building the passwordless experience you deserve. See how passkeys work.

Password Management 229

Password Management Passwords 229

The Last Watchdog

FEBRUARY 3, 2022

I currently have over 450 accounts that use passwords combined with a variety of two-factor authentication methods. Related: How the Fido Alliance enables password-less authentication. I don’t know every password; indeed, each password is long, complex and unique. the address book web app).

Authentication 235

Authentication Passwords Accountability Technology 235

Webroot

JUNE 25, 2021

Password predictability is one of the most significant challenges to overall online security. Well aware of this trend, hackers often seek to exploit what they assume are the weak passwords of the average computer user. How are passwords cracked? How are passwords cracked? The problem is password predictability.

Passwords 124

Passwords Password Management Internet Internet 124

Troy Hunt

FEBRUARY 19, 2021

I'm talking (somewhat vaguely) about the book I'm working on, how Facebook has nuked all news in Australia (which somehow means I can't even post a link to this blog post there), yet more data breaches, the awesome Prusa 3D printer I now have up and running and a whole heap more about the IoT things I've been doing.

Password Management 195

Password Management IoT Data breaches Passwords 195

Troy Hunt

APRIL 23, 2023

Book a demo today. What was a garden variety list of email addresses someone had just chucked the "Coinbase" name on had absolutely nothing to do with a breach of the crypto company. It's Zero Trust tailor-made for Okta.

Password Management 44

Password Management Data breaches Passwords 44

SecureWorld News

MAY 10, 2022

Even though World Password Day is over, it's never too late to remind your end-users that weak, unimaginative, and easy-to-guess passwords—like "123456," "qwerty," and, well… "password"—are poor options for securing accounts and devices. Improving password best practices matters.

Passwords 96

Passwords Education Password Management Computers and Electronics 96

The Last Watchdog

FEBRUARY 1, 2021

Ted Harrington’s new book Hackable: How To Do Application Security Right argues for making application security a focal point, while laying out a practical framework that covers many of the fundamental bases. Adopting and nurturing a security culture is vital for all businesses. But where to start?

Risk 154

Risk Social Engineering Software Password Management 154

The Last Watchdog

JANUARY 13, 2021

Can they create strong passwords? There are additional safety measures you can (and should) take to teach your child as they grow, things like installing virus protection, enabling multi-factor authentication, using password managers, and raising awareness about phishing scams. Can they appreciate the need to be kind online?

Scams 203

Scams Education Password Management Passwords 203

Malwarebytes

MAY 5, 2022

World Password Day is today, reminding us of the value of solid passwords, and good password practices generally. You can’t go wrong shoring up a leaky password line of defence though, so without further ado: let’s get right to it. The problem with passwords. Shoring up your passwords.

Passwords 95

Passwords Password Management Authentication Accountability 95

Adam Levin

FEBRUARY 10, 2020

There is little you can do in the event we experience widespread DDoS attacks, but one tip is to buy a good book series or a few board games since it might take a while to get the internet working again. Never buy a device that doesn’t allow you to set a long and strong password. password, 123456, qwerty, etc.

Passwords 245

Passwords Phishing Password Management Accountability 245

Daniel Miessler

MAY 8, 2020

There are security/hacker types that maintain massive repositories of passwords. Change all default passwords to something unique and strong. Most home networks get broken into through either phishing or some random device they have with a bad password. This is the most important thing in this article.

Passwords 255

Passwords DNS Accountability IoT 255

Krebs on Security

JANUARY 30, 2024

Those who submitted credentials were then prompted to provide the one-time password needed for multi-factor authentication. A booking photo of Noah Michael Urban released by the Volusia County Sheriff. A booking photo of Noah Michael Urban released by the Volusia County Sheriff. According to an Aug.

Social Engineering 355

Social Engineering Mobile Passwords Cybercrime 355

Malwarebytes

SEPTEMBER 20, 2021

In a recent blog Microsoft announced that as of September 15, 2021 you can completely remove the password from your Microsoft account and use the Microsoft Authenticator app, Windows Hello, a security key, or a verification code sent to your phone or email to sign in to Microsoft apps and services. Why get rid of passwords?

Passwords 110

Passwords Accountability Authentication Phishing 110

Security Affairs

SEPTEMBER 18, 2024

Script code snippet – Credit OALABS The attackers hope that the victim will save the password when asked by the browser, so that it will be stolen by StealC running. Enable 2FA Authentication: This measure adds an extra layer of security by requiring a second factor of authentication in addition to the password.

Passwords 127

Passwords Identity Theft Education Authentication 127

Malwarebytes

OCTOBER 4, 2021

The personal information for affected Neiman Marcus customers varied and may have included: Names and contact information Payment card numbers and expiration dates (without CVV numbers) Neiman Marcus virtual gift card numbers (without PINs) Usernames, passwords, and security questions and answers associated with Neiman Marcus online accounts.

Data breaches 143

Data breaches Passwords Password Management Accountability 143

Malwarebytes

OCTOBER 26, 2021

Besides people not securing their Facebook settings and making everything public, they also make more blatant mistakes like posting their email addresses, clicking on links to surveys in Facebook, clicking on unsolicited links in Messenger , and answering posts that phish for information that makes it easier to guess your passwords.

Media 118

Media Cybersecurity Advertising Passwords 118

Cisco Security

OCTOBER 13, 2022

Your phone number(s): Many social media networks let you look up friends through your contact book or by their phone number, and many other legitimate websites will use simple verification of your phone number as a way to prove your identity. If you already use a password manager , you’re ahead of the game!

Passwords 145

Passwords Accountability Media Password Management 145

Malwarebytes

SEPTEMBER 10, 2024

We have all [his/her] address book, social media, history of viewing sites, dating apps, all files, phone numbers, and addresses of all [his/her] contacts) and are willing to give you a full access to this data. If the email includes a password, make sure you are not using it any more on any account.

Scams 111

Scams Passwords Media Password Management 111

Malwarebytes

SEPTEMBER 21, 2021

Show them these tips: Never use the same password twice. And if your child uses the same password across multiple accounts, when one gets breached they are all vulnerable. And if your child uses the same password across multiple accounts, when one gets breached they are all vulnerable. This is where a password manager comes in.

Internet 132

Internet Internet Passwords Password Management 132

CSO Magazine

OCTOBER 6, 2022

Password manager vendor Dashlane has announced updates to its suite of enterprise offerings. These include a new Dark Web Insights tool that provides a breakdown of compromised passwords, a standalone authenticator app for enabling account multi-factor authentication (MFA), and a low-cost starter plan for small businesses.

Authentication 75

Authentication Small Business Password Management Passwords 75

SecureWorld News

APRIL 15, 2021

On a recent SecureWorld Sessions podcast episode, Social Engineering: Hacking Humans , host Bruce Sussman spoke with Christopher Hadnagy, an entrepreneur and author of five books about social engineering and hacking the human. That's how many phishing emails, and I wrote my third book on the psychology of phishing. 19 million, okay?

Social Engineering 101

Social Engineering Engineering Phishing Password Management 101

Krebs on Security

FEBRUARY 18, 2019

government — along with a number of leading security companies — recently warned about a series of highly complex and widespread attacks that allowed suspected Iranian hackers to siphon huge volumes of email passwords and other sensitive data from multiple governments and private companies. ” IMPROVEMENTS. -Use

DNS 279

DNS Internet Internet Government 279

CyberSecurity Insiders

AUGUST 14, 2022

UK government is busy investigating the incident and has taken the issue seriously, as it has disrupted services related to ambulance dispatching, patient referrals, appointment bookings, emergency prescriptions severely.

Ransomware 103

Ransomware Malware Mobile Software 103

CyberSecurity Insiders

MAY 16, 2022

While exploring phishing examples and best tools to manage passwords, offer to dive into how tools actually work. Think about password management. The average person, in their personal and professional life, may be managing as many as 200 application accounts, each with a password.

CSO 131

CSO Passwords Password Management Accountability 131

Malwarebytes

SEPTEMBER 12, 2024

We have all [his/her] address book, social media, history of viewing sites, dating apps, all files, phone numbers, and addresses of all [his/her] contacts) and are willing to give you a full access to this data. If the email includes a password, make sure you are not using it any more on any account.

Scams 127

Scams Artificial Intelligence Backups Cryptocurrency 127

SecureWorld News

JUNE 6, 2023

Grimes has worked in the cybersecurity industry for more than 30 years, authoring 13 books and more than 1,300 articles. Common ways to spot it are unexpected subjects or unexpected email addresses, requests for any kind of password, and any email with links that are not congruent to the display names. What is phishing?

Phishing 98

Phishing Social Engineering Security Awareness Engineering 98

Spinone

JANUARY 21, 2015

Here is the annual list of the 25 most frequently passwords found on the Internet appearing to be the Worst Passwords, that will expose anybody to being hacked or having their identities stolen. SplashData has released its annual list of the most common passwords compiled from more than 3.3

Passwords 40

Passwords Password Management Backups Hacking 40

Security Affairs

SEPTEMBER 22, 2019

A flaw in LastPass password manager leaks credentials from previous site. Magecart attackers target mobile users of hotel chain booking websites. A bug in Instagram exposed user accounts and phone numbers. Delaler Leads, a car dealer marketing firm exposed 198 Million records online.

Adware 81

Adware Advertising Password Management Hacking 81

Security Through Education

SEPTEMBER 19, 2023

Utilize a Password Manager As humans we like things that are easy to remember, and that doesn’t change when it comes to passwords. However, easy to remember and reused passwords are weak passwords that can easily be cracked and leveraged across accounts. This article will address ways you can get involved.

Social Engineering 52

Social Engineering Cybersecurity Password Management Passwords 52

eSecurity Planet

FEBRUARY 8, 2022

In addition to a password, the user needs a pin, a physical token or key, a code sent to a smartphone, or some kind of biometric input. It eliminates the need for users to enter usernames and passwords for individual applications and systems. Gartner sees access management eventually becoming about decentralized identity.

Passwords 98

Passwords Authentication Risk Digital transformation 98

eSecurity Planet

DECEMBER 2, 2022

Protect the credentials to these systems in a password manager or credential vault (such as Azure Key Vault or AWS Secrets Manager). Likewise, keep your credentials for your cloud backup solutions in your key vault, not in some password file on your IT share. This is equally important for storage keys and certificates.

Architecture 115

Architecture Ransomware Backups Firewall 115