@cdarwin@c.imThe U.S. Cybersecurity and Infrastructure Security Agency (CISA)
has been leaving the digital keys to its own cloud storage accounts sitting out in the open, in plain text form,
for some unknown amount of time,
according to a report from Krebs on Security.
The problem finally got fixed over the weekend, the report says.
The repository was reportedly named “Private-CISA.”
The contents included passwords, keys, and tokens
—and the passwords were plain …
@Xavier@infosec.exchange“One of the exposed files, titled ‘importantAWStokens,’ included the administrative credentials to three Amazon AWS GovCloud servers. Another file exposed in their public GitHub repository — ‘AWS-Workspace-Firefox-Passwords.csv’ — listed plaintext usernames and passwords for dozens of internal CISA systems. According to Caturegli, those system[s] included one called ‘LZ-DSO,’ which appears short for ‘Landing Zone DevSecOps,’ the agency’s secure code development environment.”
@qurlyjoe@mstdn.social
@Techmeme@techhub.social1Password launches a new Claude integration for Mac that lets Anthropic's AI agent sign in to websites without seeing the user's password or 2FA code (Zac Hall/9to5Mac)
https://9to5mac.com/2026/07/16/1password-now-lets-claud…
@joe@toot.worksI am a developer and I have never been told to use a cloud AI for anything. I was told to only use Copilot if I was to use one, though. That makes sense to me because copilot through the o365 tenant has extra data protections. I'm guessing that someone out there is uploading passwords and keys to a cloud AI.
@al3x@hachyderm.ioIs there anyone I know using Vivaldi on iOS and *never* having issues autocompleting passwords from Apple Passwords?
#🙌
@publicvoit@graz.social#Microsoft #Edge Stores All Saved #Passwords in Cleartext Process Memory at Launch
@metacurity@infosec.exchangeWorld leaders want American AI. They just don’t want America to be able to turn it off
https://techcrunch.com/2026/06/17/cybercriminals-allegedly-hacked-tens-of-thousands-of-fortinet-firewall…
@Techmeme@techhub.socialApple unveils an Apple Intelligence feature that can automatically change compromised passwords, using agentic AI, and save them to the Passwords app (James Pero/Gizmodo)
https://gizmodo.com/apple-intelligence-can-change-your-passwords-…
@qbi@freie-re.deWebsite: Please register for an account
qbi: OK, Username: foo and Passwort: "EEbkVt3nAqdUsgtuUgbX5wjW".
Webseite: "Passwords must have at least one non letter or digit character."
qbi: 🤔
@grahamperrin@bsd.cafeAll the passwords were stored in Active Directory description fields
https://www.theregister.com/security/2026/06/04/all-the-passwords-were-stored-in-active-directory-description-fields/5250820
&quo…
@jerome@jasette.facil.services
@probablyjohnfunk@social.linux.pizzaMultiple high profile website breaches over the years mean cybercriminals already have your personal data, including things as sensitive as passwords and Social Security numbers. It's too late to hide from them, but you can be prepared for them.
https://cybersecuritysimplified.subst…
@johnleonard@mastodon.socialThe UK National Cyber Security Centre (NCSC) has advised that passkeys should now be consumer’s first choice for authentication, and that the use of passwords should be gradually phased out.
https://www.
@kubikpixel@chaos.social«Security — 60% of MD5 password hashes are crackable in under an hour:
Happy World Password Day! Maybe it's finally time to kill this holiday in favor of World No-More-Passwords Day?»
I don't want to know where MD5 is still being used for services in the background. The dark side is certainly bigger than we assume.
🔓
@chris@mstdn.chrisalemany.cageneral IT screaming.....
it's not hard to save your passwords securely people! You are Professionals. Save a unique password for every website!
@ErikJonker@mastodon.social"Pass the key, passwords have passed their sell-by date"
#cybersecurity
@ddrake@mathstodon.xyzA very, very obscure nerdy cool thing:
When installing Ubuntu, you can choose to set up ssh -- and there's now a feature where it downloads your ssh keys from GitHub! Just give it a username.
This may just be with Ubuntu Server, but it's really nice, since you can install ssh without password auth and never need to actually log into the machine from the terminal to import ssh keys, or allow passwords and then later turn them off.
Even better would be some local vers…
@andres4ny@social.ridetrans.itI still don't understand why you'd want an AI web browser. https://thenextweb.com/news/bioshocking-ai-browser-credential-leak-layerx
@vague@social.linux.pizza
@migueldeicaza@mastodon.socialOh god I have been putting off fixing my passwords for too long.
This is a godsend.
@publicvoit@graz.socialGet your #passwords out of #BitWarden while you still can
https://www.osnews.com/story/…
@daniel@social.telemetrydeck.comAuto change passwords is really cool. No snark. @…
@cheryanne@aus.socialThe Spood And Matt Show
Expect stories, kids, mates, work, travel, terrible passwords, accidental forklift purchases, and the occasional Japanese ryokan dance party...
Great Australian Pods Podcast Directory: https://www.greataustralianpods.com/the-spood-and-matt-show…
@jdrm@social.linux.pizzaUna pšgina muy interesante para leer... #noChatControl #chatControl #ExitChatControl
@esoriano@social.linux.pizza
@emilis@social.linux.pizzaRE: https://aus.social/@slevelt/116717340602235855
Any password you store in the Passwords app may be changed without your knowledge.
You may lose access to your existing web accounts outside of Apple devices.
IANAL, but this may be a crime in some …
@stefan@gardenstate.socialPasskeys Explained: Are They Actually Better Than Passwords? by Addie LaMarr
https://www.youtube.com/watch?v=1nnOvYHwweE
@theprivacydad@social.linux.pizzaEnte's Legacy Kit looks like an interesting new tool!
https://ente.com/blog/legacy-kit/
"Ente Locker is for the practical parts of a life: IDs, insurance papers, medical records, passwords, notes, and the documents someone may need in your absence.
Since launch, we learned that som…
@thesaigoneer@social.linux.pizzaThe idea that the KeePassXC database with your passwords is within your own ecosystem, and not on someone else's computer, is absolutely worth the minor hoops you have to crawl through.
#keepassxc
@Techmeme@techhub.socialCISA says weak security controls around the use of public GitHub repos allowed a contractor to accidentally leak private cloud access keys and other credentials (Eric Geller/Cybersecurity Dive)
https://www.cybersecuritydive.com/news/cisa-github-pas…
@cdarwin@c.imAdaptHealth says attackers used social engineering to breach its systems
and steal sensitive patient data,
including passwords associated with insurance billing.
The medical equipment company disclosed the attack to the Securities and Exchange Commission (SEC) on Thursday,
noting that attackers accessed internal patient management systems, document storage platforms,
and external electronic health record system portals.
The attack targeted an unwitting thi…
@Techmeme@techhub.socialNotice: Meta says ~20,000 Instagram accounts may have been hacked in a recent attack that abused an AI-powered account recovery support tool to reset passwords (Eduard Kovacs/SecurityWeek)
https://www.securityweek.com/meta-says-20000-instagram-accoun…
@johnleonard@mastodon.socialWhile passkeys are an improvement on passwords in security terms, they are not perfect, and there are inevitable trade‑offs in their implementation.
https://www.computing.co.uk/analysis/2026/
@theodric@social.linux.pizzaLook at this fantastic piece of advice from Microsoft! https://learn.microsoft.com/en-au/answers/questions/2007466/are-costs-incurred-when-attempting-to-scan-passwor
@Techmeme@techhub.socialApple announces new Apple Intelligence features for its apps, including a Notify Me feature in Safari and a Call Context feature in the Phone app (John Quintet/iPhone in Canada)
https://www.iphoneincanada.ca/2026/06/08/safari-ga…
@luana@wetdry.world
