nos.nl Passwork Password Manager Linked to Russian Security Services
Article Content
- •Passwork, a password manager, is linked to Russian security services despite claims of European origins.
- •The software is used by various European organizations, including those in critical infrastructure sectors.
- •Concerns arise over potential espionage risks due to compliance requirements under Russian law.
An investigation by OCCRP reveals that Passwork, a password manager used by European entities, has ties to Russian security services despite its claims of being a European company based in Spain. The software, originally developed in Russia in 2014, is still utilized by Russian state-owned companies. Although no evidence of password theft has been found, the researchers note that companies operating under Russian law must comply with requests from Russian intelligence agencies. This raises concerns about potential vulnerabilities and espionage risks for users, including major firms in the Netherlands and Ireland. Following the revelations, some companies, like Novar, have ceased using Passwork. The situation remains contentious, with differing opinions on the software's safety among users.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Continue Reading
Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…
Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization. Both…