The United States are banning Kaspersky products. Starting July 20, Kaspersky is no longer allowed to sell its products to new customers. Software updates remain available until September 29, 2024. Customers who […] Thank you for being a Ghacks reader.…
Category: Security Software news and updates
How long does it take to crack a password in 2024?
Password cracking tools improve all the time. With AI entering the game, the time to brute force passwords has been reduced significantly already and continues to be reduced. Password guidelines and rules […] Thank you for being a Ghacks reader.…
TunnelVision attack against VPNs breaks anonymity and bypasses encryption
Researchers from Leviathan Security have discovered a new vulnerability that affects virtual private networks (VPNs) on most platforms. VPNs serve multiple purposes. They encrypt all traffic when connected to a VPN server […] Thank you for being a Ghacks reader.…
Bitwarden launches standalone Bitwarden Authenticator app
Bitwarden has released a first public version of Bitwarden Authenticator, a two-factor authentication app for Android and iOS. The app generates codes for services, which are then required to sign to accounts. […] Thank you for being a Ghacks reader.…
Bitwarden launches passkeys support in mobile apps for Android and iOS
Users of the password management solution Bitwarden are one step closer to full passkeys support. The organization launched new beta apps for Android and iOS earlier this month that introduced limited passkeys […] Thank you for being a Ghacks reader.…
Microsoft publishes new Registry security mitigation for Intel processors (Spectre)
About six years ago, vulnerabilities were discovered that affected most Intel and AMD processors. The vulnerabilities, Spectre and Meltdown, can be exploited to read sensitive data from attacked computer systems. Intel released […] Thank you for being a Ghacks reader.…
Microsoft publishes new Registry security mitigation for Intel processors (Spectre)
About six years ago, vulnerabilities were discovered that affected most Intel and AMD processors. The vulnerabilities, Spectre and Meltdown, can be exploited to read sensitive data from attacked computer systems. Intel released […] Thank you for being a Ghacks reader.…
KeePassXC adds support for Passkeys, improves database import from Bitwarden and 1Password
KeePassXC has been updated to 2.7.7. The latest version of the open source password manager adds support for Passkeys, and has gained the ability to import your vault data from Bitwarden. Passkeys […] Thank you for being a Ghacks reader.…
KeePassXC adds support for Passkeys, improves database import from Bitwarden and 1Password
KeePassXC has been updated to 2.7.7. The latest version of the open source password manager adds support for Passkeys, and has gained the ability to import your vault data from Bitwarden. Passkeys […] Thank you for being a Ghacks reader.…
First look at Malwarebytes 5.0
It took Malwarebytes nearly five years to release the next iteration of its Malwarebytes security program. Malwarebytes 5.0 is available now for all supported operating systems (Windows, Mac, iOS, and Android). Malwarebytes […] Thank you for being a Ghacks reader.…
First look at Malwarebytes 5.0
It took Malwarebytes nearly five years to release the next iteration of its Malwarebytes security program. Malwarebytes 5.0 is available now for all supported operating systems (Windows, Mac, iOS, and Android). Malwarebytes […] Thank you for being a Ghacks reader.…
RustDoor malware targets macOS users by posing as a Visual Studio Update
A new malware called RustDoor is targeting macOS users. The malware has been undetected for 3 months, and poses as a Microsoft Visual studio Update. The malware was discovered by Bitdefender. A […] Thank you for being a Ghacks reader.…
RustDoor malware targets macOS users by posing as a Visual Studio Update
A new malware called RustDoor is targeting macOS users. The malware has been undetected for 3 months, and poses as a Microsoft Visual studio Update. The malware was discovered by Bitdefender. A […] Thank you for being a Ghacks reader.…
KeePass 2.56 released: options search and history improvements
The developer of the free password manager KeePass has released version 2.56 of the Windows application. KeePass is a local password manager by default; this means that it does not require a […] Thank you for being a Ghacks reader.…
KeePass 2.56 released: options search and history improvements
The developer of the free password manager KeePass has released version 2.56 of the Windows application. KeePass is a local password manager by default; this means that it does not require a […] Thank you for being a Ghacks reader.…
70 million account credentials were leaked in a massive password dump
A security researcher has unearthed what appears to be one of the biggest password dumps ever. Over 70 million unique credentials have been leaked on the dark web. The news came to […] Thank you for being a Ghacks reader.…
Bitwarden: how to create and use Passkeys to sign in
Bitwarden users have a number of options already when it comes to signing-in to their vaults. They can use a master password and improve security by adding a two-factor authentication option to […] Thank you for being a Ghacks reader.…
LastPass is enforcing some security changes to user accounts
LastPass is making some changes to enhance the security of its to user accounts. The news comes as a follow-up to the company’s plans to enforce stronger passwords a few months ago. […] Thank you for being a Ghacks reader.…
Its Groundhog Day at Microsoft! Vulnerability patched again
Remember the movie Groundhog Day? Bull Murray plays a rather self-centered weatherman who finds himself in a time loop on Groundhog Day. Windows administrators may have similar feelings to Murray’s in regards […] Thank you for being a Ghacks reader.…
The most popular passwords of 2023 are easy to guess and crack
Each year, analysts at various Internet security companies release lists of the most used (and known) passwords. These lists are based on leaked password database data. The passwords that are on these […] Thank you for being a Ghacks reader.…
Protect your Discord account with a Security Key
Users of the chat app Discord may now protect their accounts using security keys. The developers of Discord have added the option to the existing arsenal of multi-factor authentication options that the […] Thank you for being a Ghacks reader.…
Scam or not? BitDefender’s Scamio AI promises to have the answer
Scamio is a new AI tool that promises to help Internet users combat scams. Spam and scams are common on today’s Internet. Especially users who are not tech-savvy may have difficulties distinguishing […] Thank you for being a Ghacks reader.…
If your Windows PC freezes, Avira security software may be the culprit
A recent update for Avira antivirus software for Windows seems to have a negative impact on system stabilization for some users. For a couple of days, Avira users have reported issues with […] Thank you for being a Ghacks reader.…
LogoFail vulnerability affects many Windows and Linux devices
Many commercial computers are vulnerable to a set of vulnerabilities that exploit flaws in the processing of startup logos during boot. Security researchers at Binarly have disclosed security vulnerabilities in system firmware […] Thank you for being a Ghacks reader.…
BLUFFS: new Bluetooth vulnerability discovered that affects most devices
BLUFFS is an acronym for a new Bluetooth vulnerability that security researcher Daniele Antonioli disclosed recently. BLUFFS, which stands for Bluetooth Forward and Future Secrecy, is actually a set of six unique […] Thank you for being a Ghacks reader.…
When will the cybersecurity company Okta ensure its own security?
On Tuesday, Okta revealed that hackers had stolen data from all of its customer support users in a major breach of its customer support system. The company had previously said that only […] Thank you for being a Ghacks reader.…
MDP warns parents about this iOS feature
In a recent social media post, the Middletown Division of Police in Ohio has put an iPhone NameDrop warning for parents. Introduced in the iOS 17 update, this feature allows users to […] Thank you for being a Ghacks reader.…
Enable 256-bit Bitlocker encryption on Windows 11 to boost security
Bitlocker is the default encryption technology of the Windows operating system. It is used widely on Windows, but some users prefer third-party solutions, such as VeraCrypt. What many users of Bitlocker don’t […] Thank you for being a Ghacks reader.…
Data of 8.5 million patients compromised in the United States
Healthcare SaaS provider Welltok has disclosed a data breach that has compromised the personal information of nearly 8.5 million patients in the United States. Welltok works with healthcare providers across the US, […] Thank you for being a Ghacks reader.…
Security researchers bypass Windows Hello fingerprint authentication
Security researchers at Blackwing Intelligence managed to bypass Windows Hello fingerprint authentication on devices with the three most used fingerprint sensors on Windows. The researchers were asked by Microsoft’s Offensive Research and […] Thank you for being a Ghacks reader.…
Protect your eBay account with Authenticator apps
Users of eBay had several options up until now to improve account login security using 2-step verification. They could get texts or emails from eBay that contain the code, or get codes […] Thank you for being a Ghacks reader.…
CVE-2023-4966 vulnerability becomes a global problem
Threat researcher Kevin Beaumont has been tracking attacks against various companies, including the Industrial and Commercial Bank of China (ICBC), DP World, Allen & Overy, and Boeing, and found they had something […] Thank you for being a Ghacks reader.…
CVE-2023-4966 vulnerability becomes a global problem
Threat researcher Kevin Beaumont has been tracking attacks against various companies, including the Industrial and Commercial Bank of China (ICBC), DP World, Allen & Overy, and Boeing, and found they had something […] Thank you for being a Ghacks reader.…
Mullvad’s public encrypted DNS Servers run in RAM now
Sweden-based VPN provider Mullvad announced today that its public encrypted DNS servers run fully in RAM. The announcement comes less than two months after Mullvad completed the migration of its VPN infrastructure […] Thank you for being a Ghacks reader.…
Suspicious Microsoft Authenticator requests don’t trigger notifications anymore
Microsoft Authenticator will suppress suspicious authentication prompts to protect users against social engineering attacks. Microsoft has now enabled the security feature, which it unveiled back in August 2023. Microsoft Authenticator is a […] Thank you for being a Ghacks reader.…
Suspicious Microsoft Authenticator requests don’t trigger notifications anymore
Microsoft Authenticator will suppress suspicious authentication prompts to protect users against social engineering attacks. Microsoft has now enabled the security feature, which it unveiled back in August 2023. Microsoft Authenticator is a […] Thank you for being a Ghacks reader.…
Be careful if you use Apple’s Find My network
Apple’s “Find My” network is a powerful tool that can help users locate their lost or stolen devices. It works by using a combination of GPS and Bluetooth signals from other Apple […] Thank you for being a Ghacks reader.…
CVSS 4.0 standard has been released
The Common Vulnerability Scoring System (CVSS) is an open standard for assessing the severity of computer security vulnerabilities. CVSS scores are used by organizations and individuals around the world to prioritize vulnerability […] Thank you for being a Ghacks reader.…
Latest Bitwarden update introduces support for saving passkeys
A new version of the open source password manager Bitwarden is now available. Bitwarden 2023.10.0 introduces a number of important features to the password manager. Noteworthy additions are supported for saving passkeys […] Thank you for being a Ghacks reader.…
And the phishing Oscar goes to…
Cybercriminals are constantly evolving their tactics to exploit the latest trends and technologies. One way they do this is by using the names of popular celebrities to create phishing scams and other […] Thank you for being a Ghacks reader.…
Watch out for StripedFly malware
Cybersecurity researchers have discovered a sophisticated cross-platform malware platform named StripedFly malware that has infected over 1 million Windows and Linux systems since 2017. The malware, which was wrongly classified as just […] Thank you for being a Ghacks reader.…
Tor Browser Security Audit reveals 2 high security issues
The Tor Browser project asked the penetration testers at Cure53 to audit core components of the project. Among the components were the BridgeDB software, building infrastructure, specific Tor Browser alterations and rdsys […] Thank you for being a Ghacks reader.…
The fallout from the Okta breach continues
On September 29, 2023, 1Password discovered suspicious activity on its Okta tenant. The investigation revealed that the threat actor used a HAR file stolen in the recent Okta breach to access the […] Thank you for being a Ghacks reader.…
Beware of the Flipper Zero Bluetooth spam attacks
As we previously covered, Flipper Zero is a portable, open-source multi-tool device for pentesters and geeks. It can be used to interact with a variety of electronic devices, including RFID tags, radio […] Thank you for being a Ghacks reader.…
Nintendo adds Passkey passwordless authentication support to accounts
Nintendo users who have created an account at Nintendo may now switch to passwordless authentication thanks to passkey integration. Nintendo Switch users do not need an online account to use their device […] Thank you for being a Ghacks reader.…
LastPass to enforce minimum Master Password length of 12 characters
LastPass announced today (via email) that the requirements for the master password have been changed. The master password is the primary password used to gain access to accounts. In an email, LastPass […] Thank you for being a Ghacks reader.…
LastPass to enforce minimum Master Password length of 12 characters
LastPass announced today (via email) that the requirements for the master password have been changed. The master password is the primary password used to gain access to accounts. In an email, LastPass […] Thank you for being a Ghacks reader.…
Bitwarden Free: WebAuthn new passwordless 2FA method
Free users of the open source password manager Bitwarden may use a new two-factor authentication (2FA) method in the latest version of the application. The developers of the password management service have […] Thank you for being a Ghacks reader.…
Update your browsers ASAP
In a recent report by Stack Diary, it has come to light that Google, Mozilla, Microsoft, and Brave have all taken immediate action by releasing critical security patches. These patches address a […] Thank you for being a Ghacks reader.…
Notepad++ 8.5.7 fixes 4 security issues
The developer of the open source plain text editor Notepad++ has released the security update Notepad++ 8.5.7 to the public. The latest update addresses four security issues in the client and introduces […] Thank you for being a Ghacks reader.…
Microsoft offers an explanation for the hack of its cloud
Bugs and coincidences seem to have allowed Chinese-based hacking group Storm-0558 to steal a private MSA key from Microsoft and gain access to the accounts of organizations, including American government agencies. The […] Thank you for being a Ghacks reader.…
UK Government withdraws proposal for controversial spy clause in its Online Safety Bill
The UK Government has announced that it will not scan users’ messages for harmful content. The announcement comes after Apple, WhatsApp and Signal had threatened to remove their messaging services from Britain […] Thank you for being a Ghacks reader.…
Okta warns against attacks targeting IT service desk agents
Okta, an identity and access management company, has issued a warning about a new wave of social engineering attacks targeting IT service desk agents at U.S.-based customers. The attackers aim to trick […] Thank you for being a Ghacks reader.…
Critical security vulnerabilities in ASUS routers — update immediately
Three ASUS Wi-Fi routers are vulnerable to three critically rated remote code execution vulnerabilities that can be exploited by malicious actors to take over the devices. The affected wireless routers are the […] Thank you for being a Ghacks reader.…