credential security
3 posts
Article
One login screen now guards your entire machine
Windows 11's forced Microsoft account moves the identity boundary to one access point. Compromise the account and you assume the control, not bypass it.
Article
One PIN unlocks the vault
Vaultjacking turns one captured PIN into full retrieval of a Google Password Manager vault. Operator breakdown of the control collapse.
Article
Your GitHub commits were never trustworthy
Megalodon compromised 55,000 GitHub repositories. A technical breakdown of the trust boundary that failed and what repository owners must now verify.