Chainalysis said live tokens and password hashes for all its users were exposed. What to reset, what to revoke, and five controls that close the gap.
A password manager holds your most sensitive data, so you should be able to check how it protects it. That's why we're taking Passwork towards open source. Our first steps: making the source code available by the end of 2026 and starts an independent penetration test.
Eight characters, a required symbol, a new password every 90 days: SP 800-63B-4 rules out all three for password-only sign-in. Here is what NIST's final standard requires, and a four-part check to run against your live system.
Northflank told customers to assume every environment variable was decrypted. Railway warned some may have been, and Huntress tracked stolen M365 tokens replayed at 79 organizations. What each disclosed, and what to rotate.
A two-person IT company held legitimate access to Denmark's population register, and its admins reportedly used "123456". What the October 2026 breach shows about sizing, controlling and monitoring vendor access in your own stack.
Discover how MSPs can enhance their service offerings with managed password management, addressing client security needs while generating recurring revenue.
From policy to practice: who had access to what, with whose approval, for how long, and can you prove it? Five cybersecurity leaders on the access controls that are hardest to operationalize, and the evidence organizations need to demonstrate that they work.
A key leaked in May helped poison a release in October. Five recent incidents, from LiteLLM to Zeabur, show what happens when credentials outlive their purpose.
The White House told federal agencies to say "Super Intelligence" instead of "AI." Your agents didn't notice. They still hold live OAuth tokens and API keys that nobody owns, and a forgotten pilot token exposed Klue's customers. Here is how to govern them.
We have released an updated Passwork Docker image with patched PHP (CVE-2026-109618 and CVE-2026-109619). If you run Passwork 7 or later in Docker, update today.
