As noted by The Register, the password management application mSecure has issued a security warning to its customers following the detection of suspicious activity within its platform.
On Nov. 3, the developer mSeven Software notified users that it had launched an investigation into the incident with the assistance of external cybersecurity experts. Despite the alert, the company has not disclosed the nature of the breach, the timeline of the event or whether sensitive customer data was accessed. In its communication, mSeven Software advised users to change their passwords, reset two-factor authentication methods and remove existing passkeys. This vague guidance has caused significant frustration among the user base, particularly for those managing hundreds of credentials. Customers have expressed dissatisfaction on support forums and social media, demanding clarity regarding which specific data points were compromised. The lack of transparency from a company tasked with securing sensitive information has raised concerns about the potential impact on user security. As of now, mSeven Software has not provided further details, leaving many users to weigh the necessity of performing extensive manual security updates across their accounts. The incident highlights the critical importance of clear communication from service providers when managing potential data security threats.
Source: The Register

