mSeven Software urges mSecure users to reset passwords, 2FA and passkeys after undisclosed 'suspicious activity'
Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 2 fontes trouxeram em 04/11/2026 00:00; os links antigos trazem para cá.
Fontes: thehackernews.com ↗ theregister.com ↗
mSeven Software, maker of the mSecure password manager, emailed current and former customers on November 3, 2026 warning of "suspicious activity" tied to the application and urging them to change passwords, reset or re-enroll two-factor authentication (2FA), and remove passkeys (theregister.com, thehackernews.com). The company says it launched an investigation, took mitigation steps and engaged external cybersecurity experts (theregister.com). It has not disclosed what happened, which systems were affected, when it occurred, whether it has stopped, how many users were notified, or whether customer data or vaults were accessed (theregister.com, thehackernews.com). Customers on the mSecure support forum and Reddit have criticized the vague guidance, noting that some users store hundreds of passwords and cannot tell which credentials, 2FA methods or passkeys need replacing (theregister.com). As of the latest reporting, mSeven had not responded to press inquiries, posted a public statement on social media, or replied to the customer forum thread, so the scope and nature of the incident remain unconfirmed.
Detalhes técnicos
- mSecure can sync vault data via mSecure Cloud, Dropbox, iCloud or Wi-Fi. The Essentials plan and above of mSecure 7 can store passkeys and 2FA codes alongside passwords (thehackernews.com).
- The email does not clarify whether the resets apply to data inside the vault, to the mSecure account login, or both. It does not say whether any sync method is implicated, or whether vault data or encryption keys were involved (thehackernews.com).
- mSeven states that vault data is encrypted client-side before syncing and that developers cannot access customer information (thehackernews.com).
- Germany's BSI (Federal Office for Information Security) reported in a December 2025 study that mSeven could, in theory, access stored data in mSecure 6.1.5 for Android. The finding is limited to that version and may not reflect later updates (thehackernews.com). It is not linked to the current incident by any source.
Remediação
- The vendor advises users to change stored passwords, reset or re-enroll 2FA, and consider removing passkeys as a precaution, without specifying scope or affected accounts (theregister.com).
- The email presents these resets as optional possibilities, with no prioritization or instructions. It does not say whether customers should keep using mSecure, including for storing newly changed credentials (thehackernews.com).
- Until clarified, treat all vault-stored credentials as potentially at risk, reset 2FA and passkeys through each respective service, and watch for further official communication from mSeven Software (thehackernews.com).
Linha do tempo
-
mSecure Password Manager Users Urged to Reset Passwords, 2FA and Passkeys After Unspecified Security Incident
ler a análise desta fonte ocultar
mSeven Software, developer of the mSecure password manager, sent an email on November 3, 2026 to current and former customers warning of "suspicious activity" linked to the app and urging them to change passwords, reset two-factor authentication (2FA), and remove passkeys. The notification does not disclose what happened, which systems were affected, when the activity occurred, whether it has stopped, or how many users received it. As of the time of reporting, mSeven had not posted any public statement on mSecure's social media accounts, nor had staff responded to a customer thread discussing the email on the mSecure support forum.
Technical Details
mSecure can sync vault data via mSecure Cloud, Dropbox, iCloud, or Wi-Fi, and mSecure 7's Essentials plan and above can store passkeys and 2FA codes alongside passwords. The email does not clarify whether the recommended resets apply to data stored inside the vault, to the mSecure account login itself, or both, nor does it specify whether any particular sync method is implicated. mSeven states that vault data is encrypted client-side before syncing and that developers cannot access customer information; however, Germany's BSI (Federal Office for Information Security) reported in a December 2025 study that mSeven could, in theory, access stored data in mSecure 6.1.5 for Android — a finding limited to that specific version, which may not reflect later updates. The email does not confirm whether the suspicious activity involved vault data or encryption keys.
Remediation
The email presents password, 2FA, and passkey resets as optional possibilities without prioritization guidance or instructions on how to execute them, and it does not advise whether customers should continue using mSecure, including for storing newly changed credentials. Affected users should independently treat all vault-stored credentials as potentially at risk, reset 2FA/passkeys through each respective service, and monitor for further official communication from mSeven Software.
-
Password Manager mSecure Urges Password, 2FA and Passkey Resets After Undisclosed Security Incident
ler a análise desta fonte ocultar
mSeven Software, maker of the mSecure password manager, emailed customers on November 3, 2026 warning of "suspicious activity" tied to the application and urging them to change passwords, reset or re-enroll two-factor authentication, and potentially remove passkeys. The company says it launched an investigation, took mitigation steps, and engaged external cybersecurity experts, but has not disclosed what occurred, when it happened, or whether customer data or vaults were actually accessed. Customers on mSecure's support forum and Reddit have criticized the vague guidance, noting that some users store hundreds of passwords and have no way to determine which credentials, 2FA methods, or passkeys actually need replacing. mSeven has not responded to press inquiries, leaving the scope and nature of the incident unconfirmed.
Remediation
Affected mSecure users are advised by the vendor to change stored passwords, reset or re-enroll two-factor authentication methods, and consider removing existing passkeys as a precaution, though no specific guidance on scope or affected accounts has been provided.