Latest Plaintext Password news

Netgear WNR614 flaws allow device takeover, no fix available

Researchers found half a dozen vulnerabilities of varying severity impacting Netgear WNR614 N300, a budget-friendly router that proved popular among home users and small businesses.
- Bill Toulas
- June 10, 2024
- 05:38 PM
- 0
Bitbucket artifact files can leak plaintext authentication secrets

Threat actors were found breaching AWS accounts using authentication secrets leaked as plaintext in Atlassian Bitbucket artifact objects.
- Bill Toulas
- May 21, 2024
- 03:05 PM
- 0
Misconfigured Firebase instances leaked 19 million plaintext passwords

Three cybersecurity researchers discovered close to 19 million plaintext passwords exposed on the public internet by misconfigured instances of Firebase, a Google platform for hosting databases, cloud computing, and app development.
- Ionut Ilascu
- March 19, 2024
- 07:25 PM
- 2
Chrome extensions can steal plaintext passwords from websites

A team of researchers from the University of Wisconsin-Madison has uploaded to the Chrome Web Store a proof-of-concept extension that can steal plaintext passwords from a website's source code.
- Bill Toulas
- September 02, 2023
- 11:04 AM
- 6
KeePass exploit helps retrieve cleartext master password, fix coming soon

The popular KeePass password manager is vulnerable to extracting the master password from the application's memory, allowing attackers who compromise a device to retrieve the password even with the database is locked.
- Bill Toulas
- May 18, 2023
- 04:26 PM
- 8
Twitter Admits Recording Plaintext Passwords in Internal Logs, Just Like GitHub

Following an internal audit, Twitter admitted today that due to a bug in its password storage mechanism it accidentally logged some users' passwords in internal logs.
- Catalin Cimpanu
- May 03, 2018
- 05:15 PM
- 1
GitHub Accidentally Recorded Some Plaintext Passwords in Its Internal Logs

In an email sent out today, GitHub has warned a select number of users that a bug in its password reset functionality has recorded users' passwords in plaintext format inside the company's internal logs.
- Catalin Cimpanu
- May 01, 2018
- 06:23 PM
- 0