mSecure's maker emailed customers on November 3 to change passwords and reset security settings, but has not said what happened or whether data was taken.
mSecure, a password manager made by US company mSeven Software, has told customers to change passwords, reset their two-factor login and possibly remove passkeys. The company has not said why. For an app built to guard your logins, that silence is the story.
In an email sent November 3 and seen by The Register, mSeven said it learned of suspicious activity linked to the app. It said it started an investigation, took steps to reduce the problem and brought in outside cybersecurity experts. It urged customers to protect everything stored in mSecure.
It has not said what the activity was, when it happened, or whether anyone got at customer information. mSeven has also not answered The Register's questions. The advice could be caution or a sign of real exposure. Customers cannot tell which.
Some are frustrated. One user with more than 800 saved passwords asked if all of them need changing. Another asked whether the warning covers every two-factor method and passkey they own, or only the ones used to open mSecure. The email does not answer either question.
If you do not use mSecure, nothing here applies to you. If you do, the alert box above lists the steps. Since the company gave no guidance on priorities, start with the accounts that would hurt most if taken over, such as email, banking and work. Watch for updates from mSeven, and be careful with any email that asks you to log in.
If you use mSecure, secure your master password and your most important accounts now instead of waiting for mSeven to explain.
The Attala County Sheriff's Office in Mississippi says scam calls are reaching residents, and a call that sounds official may not be.
Read more: Mississippi sheriff warns residents about scam phone callsScammers are posing as Texas sheriff's officers and claiming you missed jury duty. Caller ID can show a real police number even when the call is fake.
Read more: Fake jury duty calls spoof a real Texas sheriff's phone numberFake PayPal emails and texts, some posing as a security report, try to get you to tap a link and type your login. Checking your account directly avoids the trap.
Read more: Got a fake PayPal message? Skip its link and check your account yourself
