Skip To Main Content
Dan Goodin on Muck Rack

Dan Goodin

Verified
San Francisco
As seen in: Ars Technica, CNN, MSN, WIRED (UK), WIRED en Español, WIRED Magazine, Flipboard, Heise Online, The Register, TechSpot, Krebs on Security and
Please use this hell site as sparingly as possible. Elmo can't be allowed to succeed. Follow me on Mastodon @dangoodin@infosec.exchange
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Dan

Contact Dan, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Terabytes of credentials leaked in massive supply-chain attack var abtest_2167268 = new ABTest(2167268, 'click');

|
By Dan Goodin Verified
| Ars Technica Verified
TEAMPCP’S RAMPAGE CONTINUES The data was scraped and exfiltrated from 2,500 users of a compromised AI package. Dan Goodin – Aug 12, 2026 5:43 pm | Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines AI-driven software development. Microsoft, Amazon, Cisco, Samsung, and Salesforce are only a handful of the entities whose access secrets were exposed.
Open in Who Shared Issue with article?

Chrome adopts what may be the best protection yet against account takeovers

|
By Dan Goodin Verified
| Tech News Tube
Tech News Tube is a real time news feed of the latest technology news headlines.Follow all of the top tech sites in one place, on the web or your mobile device.
Open in Who Shared View Duplicates (354) Issue with article?

Chrome adopts what may be the best protection yet against account takeovers var abtest_2167088 = new ABTest(2167088, 'click');

|
By Dan Goodin Verified
| Ars Technica Verified
Device-bound session credentials thwart an increasingly common form of account takeover. Dan Goodin – Aug 11, 2026 4:59 pm | Google’s Chrome browser has added a new feature that could go a long way in preventing a form of account takeover that’s grown increasingly common as users adopt two-factor authentication, passkeys, and similar protections. The new Chrome protection is known as device-bound session credentials (DBSCs).
Open in Who Shared View Duplicates (2) Issue with article?
See all 4,733 licensed articles (4,734 Total)