Windows Remote Desktop Protocol contains a login backdoor Microsoft refuses to fix
It's not a bug, but a feature, Microsoft confirmed to concerned researchers
After studying 19 billion passwords, one big problem: Over 90% are terrible
TL;DR: A new study analyzing more than 19 billion passwords from relatively recent data breaches between April 2024 and 2025 has found that the vast majority are weak. Alarmingly, only six percent of the leaked passwords were unique, leading researchers to describe a widespread epidemic of weak password reuse.
Are Passwords Dead? What Are Passkeys, and Why Everyone's Talking About Them
Tired of forgetting passwords and getting locked out of your accounts? Passkeys offer a simpler, safer way to log in---no passwords, no frustration, just a quick scan or tap on your device.
Dozens of apartment buildings at risk due to a single default password
Who is to blame, admins or the manufacturer?
Passkeys reach 15 billion accounts but fall short of expectations so far
Why though? They're safer, easier and faster to use than traditional methods
Easy to guess, hard to believe: America's most common passwords
Old habits die hard
Hacked TP-Link routers at center of massive botnet used to attack Azure customers
The network is probably still operational and likely acquiring new infrastructure
Europe fines Meta $106 million for storing user passwords in plaintext
Meta has been fined a number of times for violating the GDPR
NIST standards proposal looks to retire outdated requirements like mandatory password resets
Rules regarding the use or limitation of specific characters are also on the chopping block
Novel phishing attack uses "no-escape" kiosk mode in Chrome to extract passwords
The quick fix is Control-Alt-Delete
Newly discovered flaw makes some YubiKeys vulnerable to cloning
All YubiKey models running firmware prior to version 5.7 are affected
Can you manage your passwords? Survey shows many feel overwhelmed yet overconfident about it
Sharing and reusing passwords remain common practices, unfortunately
Google apologizes after 15 million Chrome users lost access to their passwords
Google Password Manager was borked for almost 18 hours
A record 10 billion passwords were just posted to a popular hacking forum
Hackers can do a lot of damage with this database
Apple set to launch Passwords app, taking on LastPass and 1Password
Powered by iCloud Keychain
Google says passkeys are now used by over 400 million accounts, and over a billion sign-ins
Passkeys are more popular and feature-rich than ever
Nvidia RTX 4090 can crack complex 8-character passwords in minutes
The Nvidia A100 can do it even faster
UK becomes first country to outlaw easily guessable default passwords on connected devices
Companies that ignore the law face a $12.5 million fine
Vision Pro users are angry the device has no reset or recovery measures for password loss
A day-one password bug locks users out of the headset, and a trip to the store is the only remedy
Mercedes-Benz accidentally shared its source code and business secrets with the whole world
A perplexing human error put the German carmaker's IT security at risk
23andMe confirms last year's massive data breach went unnoticed for five months, hackers stole raw genotype data
The company previously blamed customers for reusing passwords
Russian hackers accessed Microsoft's corporate network for a month
Poor secure configuration exposed the software and AI giant to information exfiltration
Facepalm: Even though they can now choose from a remarkably long list of attacks against corporate networks, cybercriminals often resort to "simpler" methods like brute-force password guessing. No one is safe from insecure email accounts, after all.
Massive data dump containing millions of passwords sparks security alert: Is your data safe?
The dataset contains 71 million credentials and 25 million never-before-seen passwords
Tech manufacturers must eliminate default passwords, says cyberdefense agency CISA
Cybersecurity best practices can't rely on decisions by single users or organizations