home.social

#weakpasswords — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #weakpasswords, aggregated by home.social.

fetched live
  1. Microsoft 365 users and admins, beware! There's a specific IPv6 range (2a0a:d683::/32) operated by a provider called LSHIY that is engaging in password spraying / brute force login attempts against Microsoft accounts with old, previously leaked credentials that were disclosed as part of prior breaches.

    The attack bypasses MFA and SSO because it uses the deprecated (but still functional) OAuth Resource Owner Password Credentials 2.0 flow. But it works because some people still use creds that were stolen years ago and were never changed. So change your passwords, people!

    huntress.com/blog/lshiy-passwo

    #M365 #bruteforce #passwordspray #compromise #weakpasswords

  2. I'm in an app trying to secure a login to a device and trying to chang the password...

    The app keeps saying I'm entering a weak password and to enter a strong one...

    Here is an example of what I'm entering... let me know how weak this is... and no... I'm not acutally going to use this one now...

    Qv6*xD^55$okoJ%b#x#6

    #password #passwords #weakpasswords #weakpassword #cybersecurity