aegis-vault: offline secret vault with Argon2id + AES-256-GCM

Sun, 16 Aug 2026 11:32:38 +0000

Engineer — Learn: A self-hosted, zero-telemetry vault using strong primitives worth evaluating as a local secrets store for dev workflows or air-gapped environments, but no active threat or patch action required.
SOC/IR — Skip
Leader — Skip

Phishing campaign targets LastPass and Bitwarden users with fake alerts

Wed, 15 Jul 2026 12:11:39 +0000

Engineer — Skip
SOC/IR — Learn: Active campaign harvesting password manager credentials could affect enterprise employees; no IOCs or TTPs are published in this item to hunt or detect against, but credential-stuffing follow-on activity is worth monitoring in identity logs.
Leader — Learn: If staff use LastPass or Bitwarden for work credentials, this campaign warrants a targeted security awareness reminder; no breach or vendor incident requiring formal action at this time.