January 16, 2020

Update now! Popular WordPress plugins have password bypass flaws

Researchers have discovered bad authentication bypass vulnerabilities affecting two WordPress plugins which should be patched as soon as possible.

Naked Security

January 14, 2020

Google tests biometric authentication for Android autofill

Google is testing out a feature to make Android's built-in password manager safer.

Naked Security

December 20, 2019

Hello ‘123456,’ my old friend, I’ve come to talk with you again

Once again, it reins supreme as the #1 smelliest old fish of a password on the list of ones that most frequently turn up in data breaches.

Naked Security

December 19, 2019

Get in line! 38,000 students and staff forced to queue for new passwords

It's not a bread line, and it's not a line to see Santa - it's an analog response to a nasty cyber attack.

Naked Security

December 12, 2019

Chrome 79 includes anti-phishing and hacked password protection

Version 79 of Chrome is out, and it promises to do a better job of protecting you against phishing sites and credential stuffing attacks.

Naked Security

September 17, 2019

Former hacker warns against password reuse

Kyle Milliken is back from jail, and he has some advice for you: Do. Not. Reuse. Your. Passwords.

Naked Security

August 20, 2019

Chrome users ignoring warnings to change breached passwords

If you were told that the password you had just entered was known to have been compromised in a data breach, what would you do?

Naked Security

July 23, 2019

Big password hole in iOS 13 beta spotted by testers

A security clanger has been spotted in the current beta version of iOS 13 which allows anyone to access a user’s stored web and app passwords without having to authenticate.

Naked Security

June 19, 2019

Pass the salt! Popular CMSs aren’t securing passwords properly

A group of researchers has discovered that many of the web's most popular content management systems are using obsolete algorithms to protect their users' passwords.

Naked Security