This is the RSS 2.0 feed from www.secnews.physaphae.fr. IT's a simple agragated flow of multiple articles soruces. Liste of sources, can be found on www.secnews.physaphae.fr. 2024-05-20T16:25:22+00:00 www.secnews.physaphae.fr The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) 2023-03-07T11:51:00+00:00 https://thehackernews.com/2023/03/lastpass-hack-engineers-failure-to.html www.secnews.physaphae.fr/article.php?IdArticle=8316205 False Data Breach LastPass,LastPass 2.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) 2023-02-28T11:46:00+00:00 https://thehackernews.com/2023/02/lastpass-reveals-second-attack.html www.secnews.physaphae.fr/article.php?IdArticle=8314086 False Data Breach,Threat LastPass 1.00000000000000000000 Wired Threat Level - Security News 2022-12-28T19:53:16+00:00 https://www.wired.com/story/lastpass-breach-vaults-password-managers/ www.secnews.physaphae.fr/article.php?IdArticle=8295615 False Data Breach LastPass 2.0000000000000000 InformationSecurityBuzzNews - Site de News Securite 2022-12-23T11:48:55+00:00 https://informationsecuritybuzz.com/lastpass-latest-data-breach-exposes-customer-passwords/ www.secnews.physaphae.fr/article.php?IdArticle=8294177 False Data Breach LastPass 1.00000000000000000000 SecurityWeek - Security News 2022-12-22T21:07:44+00:00 https://www.securityweek.com/lastpass-says-password-vault-data-stolen-data-breach www.secnews.physaphae.fr/article.php?IdArticle=8293994 False Data Breach LastPass 1.00000000000000000000 Schneier on Security - Chercheur Cryptologue Américain was hacked, and customer information accessed. No passwords were compromised.]]> 2022-12-02T12:09:45+00:00 https://www.schneier.com/blog/archives/2022/12/lastpass-security-breach.html www.secnews.physaphae.fr/article.php?IdArticle=8286626 False Data Breach LastPass 3.0000000000000000 Naked Security - Blog sophos 2022-12-02T01:10:59+00:00 https://nakedsecurity.sophos.com/2022/12/02/lastpass-admits-to-customer-data-breach-caused-by-previous-breach/ www.secnews.physaphae.fr/article.php?IdArticle=8286494 False Data Breach LastPass 3.0000000000000000 SecurityWeek - Security News 2022-12-01T11:47:33+00:00 https://www.securityweek.com/goto-lastpass-notify-customers-new-data-breach-related-previous-incident www.secnews.physaphae.fr/article.php?IdArticle=8286227 False Data Breach LastPass 2.0000000000000000 Naked Security - Blog sophos 2022-09-19T16:59:05+00:00 https://nakedsecurity.sophos.com/2022/09/19/lastpass-source-code-breach-incident-response-report-released/ www.secnews.physaphae.fr/article.php?IdArticle=7003919 False Data Breach LastPass None SecurityWeek - Security News 2022-09-19T10:47:33+00:00 https://www.securityweek.com/lastpass-found-no-code-injection-attempts-following-august-data-breach www.secnews.physaphae.fr/article.php?IdArticle=7001778 False Data Breach LastPass None SecurityWeek - Security News 2022-08-25T20:05:19+00:00 https://www.securityweek.com/lastpass-says-source-code-stolen-data-breach www.secnews.physaphae.fr/article.php?IdArticle=6526818 False Data Breach LastPass None AlienVault Blog - AlienVault est un acteur de defense majeur dans les IOC Lastpass survey, US employees working in mid-sized corporate businesses must manage approximately 75 passwords for work. Unsurprisingly, employees recycle passwords 13 times on average. In other words, employees are using the same passwords over and over. And in many cases, especially for corporate applications and resources that lack strong password requirements, some passwords just aren’t strong enough. Cybercriminals know this, and it’s why breaches happen. If hackers get access to your trusted data, the ramifications can be dire. The costs of a data breach go well beyond financial, and include damage to your company’s brand, trust and reputation. Why do we need stronger and longer passwords? As malware, phishing, and ransomware continue to skyrocket, we must understand that the password is the primary method for attackers to gain access to corporate systems.  Phishing passwords may be the easiest method, but passwords can also be cracked. The stronger the password, the harder it is for cybercriminals to decode. In a typical attack—the brute force password attack—attackers will use software that quickly attempts every possible password combination of numbers, letters, and symbols. These software programs get better as computing power increases. For example, an eight-character strong password was not long ago considered secure and difficult to crack. Today, it can be cracked in eight hours. But if we tack on two more characters to make it ten-character, cracking the password can take approximately five years.  Why do we need unique passwords for every login? As mentioned above, phishing is one of the simplest ways for hackers to steal our passwords. If you think your company has been victimized by phishing, malware, or ransomware, perhaps you’ve taken steps to reset those passwords. But the security risk here is if employees are using the same passwords for different apps, sites or resources. Have you heard about credential stuffing? With credential stuffing, attackers take username and password combinations they already know (which have been stolen or paid for on the dark web) and try them everywhere they can. Use of credential stuffing is escalating, and businesses of all sizes should take note. This type of attack is only successful if and when employees use the same password for different logins. What about password managers? Managing all those passwords doesn’t have to be complicated. A password management system is software that keeps an up-to-date list of all your passwords and logins, using a master password to access the password “vault”. That master password is the only one you need to remember. What if a hacker accesses your vault? Isn’t that riskier? Sure, there is undoubtedly an element of risk, but it’s critical to think in terms of relative safety. As a general rule, using some type of password ]]> 2021-05-06T10:00:00+00:00 https://feeds.feedblitz.com/~/651048994/0/alienvault-blogs~Password-security-tips-and-best-practices-for-enterprises www.secnews.physaphae.fr/article.php?IdArticle=2745384 False Ransomware,Data Breach,Hack LastPass None