#password


Over 24,000 exposed server BMCs leak password hash via decades-old flaw

Jul 28, 2026 // 15:16

More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface. For at least […]

New ClickLock macOS malware traps users into revealing login password

Jul 17, 2026 // 00:56

A new macOS information-stealing malware dubbed ClickLock terminates all visible processes to force users into entering their system login password. The malware is designed to […]

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password

Jul 16, 2026 // 15:37

ClickLock Stealer, a new macOS infostealer, answers a victim’s refusal by killing their apps on a loop until they hand over the login password. It […]

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Jul 2, 2026 // 02:07

Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromising dozens of accounts in the […]

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Jul 1, 2026 // 14:27

Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromising dozens of accounts in the […]

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Jul 1, 2026 // 14:17

Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromising dozens of accounts in the […]

The Onboarding Password Mistake That Creates Unnecessary Risk

Jun 15, 2026 // 22:50

Employee onboarding is a busy time for IT teams. New starters need devices, accounts, access permissions, and passwords, all delivered within a tight timeframe. That […]

Dashlane password manager users locked out by brute force attacks

Jun 1, 2026 // 22:17

Multiple Dashlane users have been locked out of their accounts following brute-force attacks that attempted logins from distant locations and unknown devices. In a statement […]

Can you enforce strong Active Directory password rules without frustrating users?

May 27, 2026 // 17:16

Protecting Active Directory (AD) accounts starts with strong password policies, backed by consistent enforcement across the organization. However, make the rules too weak and you […]

Microsoft Self-Service Password Reset abused in Azure data theft attacks

May 20, 2026 // 01:02

A threat actor targeting Microsoft 365 and Azure production environments is stealing data in attacks that abuse legitimate applications and administration features. Microsoft tracks the […]