Regular Password Resets Aren’t as Safe as You Think

Published on April 23, 2026

Password resets are one of the easiest ways for attackers to bypass security controls. Specops Software shows how helpdesk social engineering turns a seemingly legitimate reset request into full account compromise. [...]

Continue reading on website
Other news

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

April 23, 2026
Bitwarden CLI has been compromised as part of the newly discovered and ongoing Checkmarx supply chain campaign, according to new findings from Socket."The affected package version appears to be @bitwarden/[email protected], and the malicious code was published in 'bw1.js,' a file included in the package contents," the application security company said."The attack appears to have leveraged a

Cosmetics giant Rituals discloses data breach affecting customers

April 23, 2026
Dutch cosmetics giant Rituals disclosed a data breach after attackers stole the personal information of an undisclosed number of customers from its "My Rituals" membership database. [...]