<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Account Security on ShaSec</title><link>https://shasec.my.id/en/categories/account-security/</link><description>Recent content in Account Security on ShaSec</description><generator>Hugo</generator><language>en</language><lastBuildDate>Tue, 28 Jul 2026 08:20:49 +0700</lastBuildDate><atom:link href="https://shasec.my.id/en/categories/account-security/index.xml" rel="self" type="application/rss+xml"/><item><title>Credential Stuffing: Why One Reused Password Opens Every Account You Have</title><link>https://shasec.my.id/en/articles/credential-stuffing/</link><pubDate>Mon, 27 Jul 2026 00:00:00 +0000</pubDate><guid>https://shasec.my.id/en/articles/credential-stuffing/</guid><description>Attackers do not guess your password. They take your real password from another site's breach and try it across hundreds of services automatically. Here is how to break the chain.</description></item><item><title>How to Check Whether Your Email and Phone Number Were Exposed in a Data Breach</title><link>https://shasec.my.id/en/articles/check-data-breach/</link><pubDate>Wed, 15 Jul 2026 00:00:00 +0000</pubDate><guid>https://shasec.my.id/en/articles/check-data-breach/</guid><description>Learn how to check whether an email address or phone number appears in a known data breach, understand the result, and secure accounts without panic.</description></item><item><title>Consent Phishing: Beware of Third-Party Apps Requesting Account Access</title><link>https://shasec.my.id/en/articles/oauth-consent-phishing/</link><pubDate>Mon, 13 Jul 2026 00:00:00 +0000</pubDate><guid>https://shasec.my.id/en/articles/oauth-consent-phishing/</guid><description>A legitimate permission screen can be used for deception. Learn to assess third-party apps, understand access scopes, revoke permissions, and protect email and work accounts.</description></item></channel></rss>