The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۲:۱۶

mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity

Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and removing passkeys. The warning came in an email sent on November 3 in the name of developer mSeven Software. It says the company recently learned of suspicious activity linked to the app but

Identity & Access Security

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

AWS Security Bulletins سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۲:۲۸

CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

Read this article

Vulnerabilities & Zero-Day Cloud Computing Identity & Access Security

Source

The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۱:۴۶

Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes

Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts of its infrastructure. The incident is assessed to be part of a large-scale, artificial intelligence (AI)-powered attack campaign that came to light last week. "An external attacker gained unauthorized access to part of

Data Breach AI Security AI & Machine Learning

Source

Ubuntu Security Notices سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۱:۰۵

USN-8984-1: jabberd2 vulnerability

It was discovered that jabberd2 allowed SASL ANONYMOUS authentication even when it was not enabled in the configuration. A remote attacker could possibly use this issue to bypass authentication.

Vulnerabilities & Zero-Day Identity & Access Security

Source

The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۰:۲۵

Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft

Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world's largest cryptocurrency exchange was the culmination of a "sophisticated, multi-stage campaign" that involved the use of a tampered Homebrew installation and recruitment-themed social engineering attack targeting two of its engineers. "It was not a single isolated breach or a simple phishing incident,"

Phishing Data Breach

Source