Des spécialistes de la sécurité ont tiré la sonnette d'alarme sur la vulnérabilité des comptes en ligne, affirmant que près de la moitié des mots de passe utilisés aujourd'hui peuvent être déchiffrés en quelques minutes.
Cette évaluation inquiétante souligne que la plupart des mots de passe peuvent être piratés en moins d'une heure. Les experts insistent sur la facilité avec laquelle les choix courants peuvent être compromis à l'aide d'outils et de techniques basiques.
Researchers analyzing 10 million web pages have identified 1,748 active API credentials from 14 major providers exposed across nearly 10,000 websites, including those run by banks and healthcare providers. These leaks could enable attackers to access sensitive data or gain control over digital infrastructure. Nurullah Demir of Stanford University described the issue as very significant, affecting even major companies.
Rapporté par l'IA
New research from ETH Zurich and USI Lugano reveals vulnerabilities in popular password managers, challenging their assurances that servers cannot access user vaults. The study analyzed Bitwarden, Dashlane, and LastPass, identifying ways attackers with server control could steal or modify data, particularly when features like account recovery or sharing are enabled. Companies have begun patching the issues while defending their overall security practices.
Adult entertainment website Frivol has disclosed a data leak that may impact around 479,000 users. The breach involved an open database containing user details. The revelation was reported on February 25, 2026.
Rapporté par l'IA
A security vulnerability in the WordPress plugin Ally has been identified as an SQL injection flaw. This issue could potentially affect up to 250,000 websites using the plugin. The flaw was reported in a TechRadar article published on March 12, 2026.