Ethical Hacking News
The mSecure password manager has sent an email to its customers, warning them to change their passwords, reset their 2FA and passkeys, following some suspicious activity linked to the app. Users are advised to take immediate action to protect their confidential information, but the lack of clear information about what happened and how to protect themselves has raised concerns. Users are urged to be cautious and not rely solely on the email's advice, and to take additional steps to secure their accounts.
mSecure password manager has sent an email to customers warning them to change their passwords and reset 2FA and passkeys due to suspicious activity.The email does not provide information on what happened or whether anyone's stored data was exposed.mSecure users are advised to take immediate action to protect their confidential information, but the email's advice is not comprehensive.Users are left to wonder whether they should continue using the app or take action to protect themselves due to the lack of clear information.mSeven Software has assured users that their vault data is encrypted, but a previous study raised concerns about potential access to stored data.The incident has raised questions about the current security measures in place and whether suspicious activity compromised the integrity of the app.
The mSecure password manager has recently sent an email to its customers, warning them to change their passwords, reset their two-factor authentication (2FA) and passkeys, following some suspicious activity linked to the app. This email, sent in the name of developer mSeven Software, has been causing concern among the users of the mSecure password manager.
The email in question was sent to current and former customers of the mSecure password manager, and it advises users to take immediate action to protect their confidential information. However, the email does not provide any information on what happened or whether anyone's stored data was exposed. The email also does not specify which systems were involved, when the activity occurred, or whether it has stopped.
mSecure is a password manager that allows users to sync their vault through various platforms, including mSecure Cloud, Dropbox, iCloud, and Wi-Fi. The email's advice is specifically focused on protecting information stored in mSecure, but it does not provide clear guidance on whether the 2FA and passkey steps will cover the stored items, the mSecure account's own sign-in, or both.
The company behind mSecure, mSeven Software, has assured users that their vault data is encrypted on their device before it is synced, and that even their developers cannot access customers' information. However, this has raised concerns among some users, particularly given a previous study by Germany's Federal Office for Information Security (BSI) that found mSeven could potentially access stored data in a previous version of the app.
The BSI tested only that version, and its results may have changed with later updates. However, this raises questions about the current security measures in place, and whether the suspicious activity may have compromised the integrity of the app.
As of November 3, 2026, the newest iPhone version of mSecure was 7.1.0, released on October 23. This may be relevant to some users, as it could affect the version of the app that was affected by the suspicious activity.
The email in question was posted on mSecure's support forum, but no staff member had replied in that forum thread as of 18:00 UTC on November 3. This lack of response has led to concerns among some users, who may feel that they are being left in the dark about what happened and how to protect themselves.
Despite the lack of clear information, mSeven Software has taken steps to limit the problem and brought in outside cybersecurity experts. However, the email's advice is somewhat ambiguous, and users are left to wonder whether they should continue using the app, or take action to protect themselves.
In light of this incident, users of the mSecure password manager are advised to take immediate action to protect their confidential information. This may involve changing their passwords, resetting their 2FA and passkeys, and taking other steps to secure their accounts. However, it is essential to note that the email's advice is not comprehensive, and users should be cautious when taking any action.
In conclusion, the recent email from mSecure has raised concerns among users about the security of the app. While mSeven Software has assured users that their data is encrypted, the lack of clear information about what happened and how to protect themselves has led to uncertainty. Users are advised to take immediate action to secure their accounts, but they should be cautious and not rely solely on the email's advice.
Related Information:
https://www.ethicalhackingnews.com/articles/mSecure-Password-Manager-Alerts-Users-to-Change-Passwords-and-Update-2FA-and-Passkeys-Following-Suspicious-Activity-ehn.shtml
https://thehackernews.com/2026/11/msecure-warns-users-to-change-passwords.html
Published: Tue Nov 3 15:01:05 2026 by llama3.2 3B Q4_K_M
