{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "mSecure password manager hack: encrypted mSecure Cloud vault database reportedly stolen, users told to change passwords · updates",
  "home_page_url": "https://pwn.watch/i/msecure-password-manager-cloud-vault-database-theft-nov-2026",
  "feed_url": "https://pwn.watch/i/msecure-password-manager-cloud-vault-database-theft-nov-2026/feed.json",
  "description": "mSeven Software emailed current and former mSecure password manager customers on November 3 saying it had learned of suspicious activity involving the app, had engaged outside cybersecurity experts, and urging them to protect what they store in it, which may include changing passwords, resetting or re-enrolling two-factor authentication and removing existing passkeys. The notice did not say what was compromised or how many users are affected. Support responses shared by customers say a hacker stole an encrypted database from mSecure Cloud, that only users syncing through mSecure Cloud are affected, and that there is no evidence the encrypted contents were accessed. Stolen vaults can still be cracked offline if the master password is weak, so mSecure Cloud users should change their master password and rotate the most important stored credentials, 2FA and passkeys.",
  "language": "en",
  "_pwn": {
    "slug": "msecure-password-manager-cloud-vault-database-theft-nov-2026",
    "severity": "high",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/msecure-password-manager-cloud-vault-database-theft-nov-2026/feed.xml",
    "llms": "https://pwn.watch/i/msecure-password-manager-cloud-vault-database-theft-nov-2026/llms.txt",
    "json": "https://pwn.watch/i/msecure-password-manager-cloud-vault-database-theft-nov-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/msecure-password-manager-cloud-vault-database-theft-nov-2026#2026-11-04-da03ba70",
      "url": "https://pwn.watch/i/msecure-password-manager-cloud-vault-database-theft-nov-2026#2026-11-04-da03ba70",
      "title": "mSecure password manager hack: encrypted mSecure Cloud vault database reportedly stolen, users told to change passwords: Customers share support replies saying a hacker stole an encrypted mSecure Cloud database, limited to users syncing through mSecure Cloud, with no evidence its contents were accessed.",
      "content_text": "mSecure password manager hack: encrypted mSecure Cloud vault database reportedly stolen, users told to change passwords: Customers share support replies saying a hacker stole an encrypted mSecure Cloud database, limited to users syncing through mSecure Cloud, with no evidence its contents were accessed.\n\nSource: https://www.bleepingcomputer.com/news/security/msecure-password-manager-hack-prompts-password-reset-warnings/",
      "date_published": "2026-11-04T00:00:00.000Z",
      "external_url": "https://www.bleepingcomputer.com/news/security/msecure-password-manager-hack-prompts-password-reset-warnings/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/msecure-password-manager-cloud-vault-database-theft-nov-2026#2026-11-03-cf293f87",
      "url": "https://pwn.watch/i/msecure-password-manager-cloud-vault-database-theft-nov-2026#2026-11-03-cf293f87",
      "title": "mSecure password manager hack: encrypted mSecure Cloud vault database reportedly stolen, users told to change passwords: mSeven Software emails current and former mSecure customers about suspicious activity and advises changing passwords, resetting 2FA and removing passkeys.",
      "content_text": "mSecure password manager hack: encrypted mSecure Cloud vault database reportedly stolen, users told to change passwords: mSeven Software emails current and former mSecure customers about suspicious activity and advises changing passwords, resetting 2FA and removing passkeys.\n\nSource: https://thehackernews.com/2026/11/msecure-warns-users-to-change-passwords.html",
      "date_published": "2026-11-03T00:00:00.000Z",
      "external_url": "https://thehackernews.com/2026/11/msecure-warns-users-to-change-passwords.html",
      "tags": [
        "high"
      ]
    }
  ]
}