Massive #LastPass data breach - it's worse than anyone thought - here is my video on what happened, and what you should do to mitigate: youtu.be/OgC-4KlKFYU

GRC's Shortcut of the week for Security Now episode #905: bit.ly/3CDhnA2 This is a PowerShell script, runnable on any Windows machine, that will post-process a captured LastPass vault to show its owner everything that's visible without decryption. (Quite a lot!)

Grab your iPhone and your #YubiKey––security key support for Apple ID in iOS 16.3 is here! Engadget shares details on the announcement ⬇️ engadget.com/ios-16-3-physi…

🚨We released an ESXiArgs ransomware recovery script on GitHub to allow organizations to attempt recovery of virtual machines affected by the ESXiArgs ransomware attacks: github.com/cisagov/ESXiAr… #StopRansomware

Security keys are much more secure anyway

Really liking 2FAS. May be the best MFA app. Open source, no phone # required, and you can sync to your own private cloud.

Windows startup sounds over 16 years:

The Bitwarden password generator for Passphrase could be improved by simply adding a checkbox for special characters #wishlist

Secure browser has been around for a while, offered by Citrix and others. However, really impressed by the NetworkChuck cloud browser so far. Super easy setup and multiple browsers included in the workspace. Kudos!

Wow, hands down best speed test tool speed.cloudflare.com

Almost time for my final Active Directory Masterclass to begin. In one hour the fun begins and almost 200 people are registered to attend. WOW! Thanks. This is it folks. After this webinar, I will never do another Active Directory Masterclass. There is still time for you to

Okta got hacked. Leading to impact for CloudFlare, 1Password, and BeyondTrust. Here's everything we know about it:

Great job Black Hills Information Security

We've seen the headlines about Google killing ad blockers. Two important points: 1. Google's changes will not stop Brave from blocking ads. 2. We will support uBlock Origin and uMatrix even after Chrome stops doing so.

If you need remote control capabilities, including for Home editions of Windows, check out ControlUp EdgeDX. It’s free for 50(!) devices. controlup.com/edge-dx-vip-pa…

Bitwarden adds passkey support to log into web password vaults - Bill Toulas bleepingcomputer.com/news/security/… bleepingcomputer.com/news/security/…

Always a great event!

New WinUtil Video! youtu.be/5_AaHXrelTE

Flaw found in Yubikey 5 that has gone unnoticed for 14 years because those pesky non constant-time modular inversion are easy to miss. Requires physical access to extract private key.

Introducing the Stornado F16: 16-Bay All-Flash Server for NVMe (or SATA & SAS) Watch the full video here: bit.ly/4eC9Ilu For this week's video, Brett is back to introduce the Stornado F16, our brand-new 16-bay all-flash NVMe server. Check out this video to learn more