Blog

Passwords are a staple of both the internet and computing at large. Even as new authentication protocols have emerged—from passkeys to biometrics—most of us use passwords to log into our daily accounts and websites using a code made up of letters, numbers, and symbols.The problem is, the password was really a product of its time, and doesn't really belong in the modern digital age. Cybersecurity threats have evolved so far beyond the capability of a password to protect from them that they have actually become a liability—even when you follow best practices for creating them and keeping them secure. Case in point: News of the latest data breach, one of the largest ever, in which researchers discovered not millions, but billions of passwords floating around on the web. Sixteen billion passwo...

As malware evolves to be more sophisticated, seeing should not always equal believing. A new iteration of the "Godfather" malware found on Android is hijacking legitimate banking apps, making it increasingly difficult for users (and on-device protections) to detect. An early version of Godfather utilized screen overlay attacks, which placed fraudulent HTML login screens on top of legitimate banking and crypto exchange apps, tricking users into entering credentials for their financial accounts. It was first detected on Android in 2021 and was estimated to target several hundred apps across more than a dozen countries. The new threat, uncovered by security firm Zimperium, is Godfather's virtualization, which allows the malware to create a complete virtual environment on your device rather t...