Hot Topics

Dashlane

Facebook Popup Phishing Page (Social Login)

Google Nest’s Secret Microphone, Facebook Login Phishing, Password Manager Vulnerabilities – WB57

| | 1Password, Cybersecurity, Dashlane, facebook, google, home security, KeePass, lastpass, Myki, Nest, password manager, password managers, passwords, Phishing, Podcast, Podcast Episodes, Privacy, Vulnerabilities, Weekly Blaze Podcast, Windows
This is your Shared Security Weekly Blaze for February 25th 2019 with your host, Tom Eston. In this week’s episode: Google Nest’s secret microphone, a new Facebook login phishing campaign, and vulnerabilities ...
Shared Security
Researchers extract master password in cleartext from 1Password

Researchers extract master password in cleartext from 1Password

| | 1Password, Dashlane, Industry News, KeePass, lastpass, memory scrubbing, Password, password manager, password scrubbing, password stuffing, sensitive memory
Regular internet users today juggle numerous accounts on various platforms and websites, often using the same weak password for all of them. Tech-literate users employ different passwords for different accounts, and strong ...
HOTforSecurity
The Year Targeted Phishing Went Mainstream

The Year Targeted Phishing Went Mainstream

| | A Little Sunshine, Dashlane, Exploit Kit, KeePass, lastpass, Phishing, sextortion, The Coming Storm, Typosquatting
A story published here on July 12 about a new sextortion-based phishing scheme that invokes a real password used by each recipient has become the most-read piece on KrebsOnSecurity since this site ...
Krebs on Security
Google: Security Keys Neutralized Employee Phishing

Google: Security Keys Neutralized Employee Phishing

| | Chrome, Dashlane, dropbox, Duo Security, edge, facebook, FIDO Alliance, Firefox, Firefox Quantum, GitHub, Google Advanced Protection, KeePass, lastpass, Microsoft, opera, Safari, Security Keys, Security Tools, U2F, Web Authentication API, WebAuthn, World Wide Web Consortium, Yubikey
Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of ...
Krebs on Security