LIVE · cybersecurity feed
Live wire
Critical Flaws Discovered in Belgian eID Software Used by 2 Million PeopleSecurity Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITIONWebmail CSS Attacks Expose a New Risk for AI-Powered Email ToolsMetabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive DataCritical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise DataCVE-2026-8037 · CISA Adds Progress LoadMaster Command Injection Flaw to KEV CatalogSensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It AllAtlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to AttackersNew CSS Attacks Can Break Webmail Defenses to Steal Passwords and TokensCVE-2023-38646 · Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
cloud

Product showcase: Enpass Password Manager breaks away from the proprietary cloud model

Enpass is a password manager that stores passwords, passkeys, payment cards, identities, secure notes, software licenses, and other sensitive information in encrypted vaults. Vaults remain on the device or in a cloud storage service selected by the user. Users who work across multiple devices can install Enpass on Windows, macOS, Linux, Android, and iOS. Browser extensions are available for Chrome

zeroday.news ·

Enpass Password Manager offers a comprehensive solution for storing sensitive information such as passwords, passkeys, payment cards, and secure notes in encrypted vaults. A key distinguishing feature of Enpass is its departure from proprietary cloud storage models, allowing users to select their preferred cloud service or store data locally.

The application is available across a wide range of platforms, including Windows, macOS, Linux, Android, and iOS, with browser extensions supporting Chrome, Edge, Firefox, Safari, Brave, Opera, and Vivaldi. This broad compatibility ensures users can access their credentials across various devices.

Upon initial setup, users can choose between personal or business use and create an account via email or Sign in with Apple. Enpass provides multiple storage options for vaults, including iCloud, Google Drive, Dropbox, OneDrive, Nextcloud, WebDAV, Wi-Fi Sync, and local device storage. Existing vaults can also be restored from backup files or transferred over Wi-Fi.

The user interface prioritizes security, displaying a Security Score that summarizes password health and offering quick access to features like Face ID, AutoFill, and compromised password monitoring. The app automatically tracks weak, compromised, and passkey-enabled accounts.

Enpass includes an extensive array of templates for various record types, such as logins, credit cards, identities, secure notes, bank accounts, passports, travel documents, software licenses, crypto wallets, and insurance policies. These are organized under a "Browse" section, with dedicated categories for passkeys, one-time authentication codes, attachments, archived items, and deleted entries.

A built-in password generator allows users to configure password length, character types (uppercase, lowercase, numbers, symbols), and generate pronounceable passwords, each receiving a strength rating before saving.

For convenience and security, Enpass supports AutoFill for usernames, passwords, passkeys, authentication codes, and payment information in apps and Safari, requiring verification via Face ID, Touch ID, PIN, or a master password. The application integrates TOTP support, eliminating the need for a separate authenticator app, and stores passkeys alongside other login credentials.

Additional features include support for unlimited vaults, custom categories, tags, attachments, password history, breach monitoring, and password auditing. Users can maintain separate vaults for work and personal credentials without needing multiple accounts. Desktop applications also facilitate importing data from other password managers.

Enpass is designed for users who prioritize control over their encrypted vault storage while still benefiting from modern password management features like passkeys, AutoFill, breach monitoring, and cross-platform synchronization. Its extensive platform support and flexible storage options make it a versatile choice for users operating across diverse operating systems and devices.

cloud
ShareXLinkedInWhatsAppFacebook

More News

view all →
vulnerabilitycritical

Critical Flaws Discovered in Belgian eID Software Used by 2 Million People

The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies. The post Critical Flaws Discovered in Belgian eID Software Used by 2 Million People appeared first on SecurityWeek.

ai

OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the AI upstart said it's implementing security controls for higher-capability models and associated activities, such as isolated

security

Chainloop: Open-source evidence store and policy engine for the software supply chain

Chainloop is an open source evidence store for the software supply chain. A command line tool runs inside a GitHub Actions, GitLab, Jenkins, or Dagger pipeline, picks up what the build produced, uploads those files to content-addressable storage, and references each one in a signed in-toto attestation. in-toto is a specification for recording who ran which step of a build, so the record can be che

nation-state

How to report an AI Act violation in the EU

The EU’s fight to regulate AI models entered a new chapter on 2 August 2026, when the European Commission’s AI Office and national authorities began enforcing the AI Act. The AI Act is the EU’s law regulating AI, the first broad legal framework of its kind. It creates a common set of rules for AI systems used or sold in the EU, with the goal of encouraging innovation while protecting people’s safe

phishing

U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data

Defense manufacturer IEH Corporation has disclosed a phishing attack that compromised an employee's Microsoft 365 inbox. The breach, discovered on August 4, potentially exposed sensitive export-controlled military data, customer information, and engineering documents. While no data exfiltration has been confirmed, the incident highlights the risks associated with sophisticated social engineering tactics targeting critical infrastructure suppliers.

malware

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 109

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Fake Xeno Roblox Cheats Deliver Powerful Java Stealer Through Discord and Forums DarkSword’s Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator Cluster Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting