Secure Passwords

• 

  Google Chrome for Android Testing Identity Check Feature for Password Manager Outside Trusted Locations: Report

  Google Chrome for Android is testing a new feature that might add a layer of security when it comes to password autofill outside trusted locations, as per a report. The feature is dubbed Identity Check which Google announced last week and is said to necessitate biometric authentication before auto-filling passwords via the Google Password Manager.

• 

  FIDO Alliance Seeks to Increase Passkeys Adoption With Draft Secure Credential Exchange Specifications

  Passkeys could soon become easier to use across various platforms, thanks to new draft specifications published by the FIDO Alliance. Google, Apple, Microsoft, and password management apps like Dashlane and Bitwarden could allow users to export and import passkeys and passwords securely.

• 

  EU Privacy Regulator Fines Meta EUR 91 Million Over Password Storage

  Meta has been fined EUR 91 million by the lead European Union's privacy regulator for storing some users' passwords without protection or encryption. The company says it took immediate action to fix the error after identifying it during a security review in 2019, and that there is no evidence the passwords were abused or accessed improperly.

• 

  Australia Accuses China-Backed Hacker Group Of Stealing User Data

  Cybersecurity firms backed by the Chinese authorities have been accused of stealing passwords and usernames from unnamed Australian networks in 2022, the Australian Cyber Security Centre (ACSC) reported on Tuesday.

• 

  Password Reuse Puts Millions At Risk Of Hacking, Studies Show

  Many people reuse passwords, including for email, risking security. Professor Woodward emphasizes the importance of unique, strong passwords.

• 

  Google Responds to Detection of Session Token Malware Capable of Hijacking Accounts: Report

  Malware creators are using a zero-day exploit to access users' Google accounts via malicious code used to exfiltrate sessions tokens, according to security researchers. The exploit also allows malicious users to regenerate an authentication cookie to log in to a user's account, even after a password change.

• 

  Hackers Bypass Apple's Checks to Deliver Malicious Keyboards Used to Spy on Users: Report

  iPhone can reportedly be targeted by third-party keyboards created by hackers to bypass Apple's stringent security checks and spy on user activity. These third-party keyboards are installed via Apple's TestFlight platform to discreetly spy on a user and collect their sent messages, passwords, browsing history, bank credentials, and any other text e...

• 

  Nothing Fixed CMF Watch App Vulnerability That Could Expose Email Addresses, Passwords: Report

  Nothing has partially fixed a security vulnerability that affected the CMF Watch app on Android phones that was related to the encryption of user information. The vulnerability could also expose email addresses and passwords used to sign up for an account — these issues have come to light weeks after Nothing Chats was pulled from the Play Store a...

• 

  Beware Of Electricity Bill Payment Scam: Follow These Tips To Stay Safe

  Scammers' messages are often cleverly crafted to appear as if they are from official electricity departments, adding to the deceptive nature of the scam.

• 

  WhatsApp Introduces Support for Passkeys on Android, Enables Face or Fingerprint-Based Logins

  WhatsApp passkey support is now available on Android bringing support for logging back in to an account using biometric authentication. Users on Android smartphones will now be able to use their phone's built-in face or fingerprint recognition feature to log back in to their account with a passkey that can be securely synced across their devices.

• 

  3Commas Tweaks Internal Security After Accounts of Some Users Were Compromised, Passwords Reset

  Over the weekend, some user accounts of 3Commas were compromised and the passwords of these accounts were also changed — stirring speculations that the platform was breached by hackers. Upon internal investigation, 3Commas found that this hack only affected only a few user-accounts, and its operations on the otherwise large scale, remain safe and...

• 

  WhatsApp Passkey Support Reportedly Rolling Out to Beta Testers on Android: How It Works

  WhatsApp beta has added support for a new feature that will allow users to log in to their accounts using facial recognition or fingerprint recognition on their smartphone. The messaging service will soon allow users to create passkeys on their device which can be used to securely log in to an account using biometric authentication.

• 

  AI Tool Can Steal Passwords With 93% Accuracy By Listening To Keystrokes: Study

  An AI tool has the capability to extract passwords from the sounds of keystrokes captured during Zoom sessions, with an accuracy rate of approximately 90%.

• 

  Windows 11 Preview Adds Biometric Login for Websites and Apps via Windows Hello: Details

  Windows 11 will soon add support for passkeys with biometric authentication, allowing users to log in seamlessly to a site or application without entering a password. Here's how Microsoft is adding support for password-less logins on Windows 11.

• 

  Google Launches Passkey Support for Workspace and Google Cloud Accounts

  Google made Passkeys available for personal Google Accounts as an additional sign-in option on Monday. With the latest open beta launch, more than 9 million organisations can allow their users to sign in to Google Workspace and Google Cloud accounts using their phone or computer’s authentication systems.