Cult of Mac

PamStealer malware poses as a Mac clipboard app — and verifies your password before stealing it

The “free” clipboard manager you just downloaded could be doing more than just copying and pasting text. Researchers recently found a new malware called PamStealer disguised as Maccy, a popular ...
Decrypt

Fake Mac Clipboard App Delivers New Password-Stealing Malware

A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.
Tech Times

New APT Group Hits Power Grids in Three Countries with AI-Crafted Malware

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

ExpressVPN's password manager just got a big upgrade with secure sharing, passkey support, and more

Available today, ExpressKeys now delivers more secure sharing, passkey support, and improved cross-device management.

LastPass data breach confirmed: Everything we know so far

Hackers used a backdoor through a little-known third-party app to steal LastPass customer data.

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...
9to5google

Microsoft Edge won’t let you access its password manager without Windows Hello

Microsoft Edge is ditching master passwords in favor of a more secure way to access the password manager. Microsoft Edge password manager has removed support for master passwords on Windows in an ...
The New York Times

Tired of Hacked Passwords? Help Is on the Way.

Apps from Apple, Google and others can assist in making your online accounts more secure, even as new ways of logging in continue to take off. By J. D. Biersdorfer J.D. Biersdorfer writes about how to ...
VentureBeat

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

Any development environment that installed or imported one of the 172 compromised npm or PyPI packages published since May 11 should be treated as potentially compromised. On affected developer ...
Mashable

Microsoft Edge is storing passwords as plain text? Here's what Microsoft says.

UPDATE: May. 6, 2026, 9:40 a.m. EDT This piece was updated to include a statement from Microsoft. Password managers are supposed to make life easier for users by remembering their passwords and ...
CSOonline

Bitwarden CLI password manager trojanized in supply chain attack

Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may be behind a spate of recent supply chain attacks. Researchers warn of a new ...
PC Magazine

1Password vs. RoboForm: Which Password Manager Gives You More for Less?

From pricing to features, I break down how 1Password and RoboForm stack up for beginners, families, power users, and businesses to help you decide which password manager is right for you. I review ...