SafepasswordGenerator @SafePasswordGen

97% of passwords found in breaches don't meet basic complexity requirements. @SentinelOne's 2026 report + Verizon DBIR data, translated for normal people. 4 stats, 5 fixes, 30 minutes. safepasswordgenerator.net/blog/sentinelo…

If you installed Bitwarden CLI via npm in the last 48 hours, your GitHub tokens, SSH keys, and cloud credentials may have been exfiltrated.Your vault is safe. Everything around it is not.Full breakdown + what to rotate: safepasswordgenerator.net/blog/bitwarden…

@Lite_LLM had SOC 2 certification on March 24. It also had a backdoor on March 24. SOC 2 audits your policies. Not your CI scanner's stolen token. Ran 1.82.7 or 1.82.8? Rotate everything. Last clean version: 1.82.6.

@AISecHub this is my original content. You can see "Author: T.O. Mercer" in your own post. Original research is at safepasswordgenerator.net. Glad it's spreading. A source tag next time keeps it honest.

AISecHub @AISecHub

3 months ago

A password like G7$kL9#mQ2&xP4!w looks strong. Every password checker rates it "excellent." But researchers at Irregular just published something worth knowing: that exact string appeared 18 out of 50 times when Claude was asked to generate a password. The reason: LLMs are

32 356 2K 187K 735

The real lesson? 2FA isn't bulletproof. Your security is only as strong as your device. One bad browser extension can bypass everything. Stay paranoid. Check your accounts. Use a password manager.

Twitch has acknowledged the issue but hasn't explained how it happened. If you've been hit, contact support immediately: help.twitch.tv And if your payout hasn't processed yet (before the 15th), they might be able to stop it.

Twitch streamers are getting HACKED even with 2FA on. Payout methods changed. Money redirected. No login alerts. Here's what's happening and how to protect yourself: 🧵

If you got one of these emails: Don't click any links Don't enter your master password anywhere Report it to LastPass Stay paranoid out there.

LastPass will NEVER ask for your master password. Not by email. Not by phone. Not ever. If anyone asks for it, it's a scam. Period.

LastPass users: Check your inbox RIGHT NOW. A phishing campaign started Jan 19 is sending fake "maintenance" emails trying to steal your master password. Here's how to spot it 🧵

A music site just leaked 10.2 million passwords. They used MD5 hashing. From 2004. Meanwhile Illinois left 700K government records exposed for 3+ years. Here's what went wrong and what to do now 👇 safepasswordgenerator.net/blog/raaga-ill…

Check if your credentials have been compromised: haveibeenpwned.com Generate passwords that can't be guessed: safepasswordgenerator.net Don't be the next weak link in someone else's security chain.

Three things would have stopped this: Unique passwords (not reused across sites) A password manager Multi-factor authentication on sensitive systems

Nicholas Moore, 24, from Tennessee just pleaded guilty to hacking the U.S. Supreme Court's filing system. Not once. 25 times throughout 2023.