cyber attack password vulnerability news