Saturday , June 21 2025
Samsung

Samsung phone is saving your passwords in plain text

You copy a password from your manager, thinking it’s safe. Meanwhile, your phone is saving it in plain text. Samsung says, so far, there is no solution.

Imagine you just copied a password or banking logins from a password manager. Then you think, “Wait, does this go away after I paste it?”

Russia detects first SuperCard malware attacks via NFC

Russian cybersecurity experts discovered the first local data theft attacks using a modified version of legitimate near field communication (NFC)...
Read More
Russia detects first SuperCard malware attacks via NFC

Income Property Investments exposes 170,000+ Individuals record

Cybersecurity researcher Jeremiah Fowler discovered an unsecured database with 170,360 records belonging to a real estate company. It contained personal...
Read More
Income Property Investments exposes 170,000+ Individuals record

ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs

GreyNoise found attempts to exploit CVE-2023-28771, a vulnerability in Zyxel's IKE affecting UDP port 500. The attack centers around CVE-2023-28771,...
Read More
ALERT (CVE: 2023-28771)  Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs

CISA Flags Active Exploits in Apple iOS and TP-Link Routers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently included two high-risk vulnerabilities in its Known Exploited Vulnerabilities (KEV)...
Read More
CISA Flags Active Exploits in Apple iOS and TP-Link Routers

10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online

SafetyDetectives’ Cybersecurity Team discovered a public post on a clear web forum in which a threat actor claimed to have...
Read More
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online

Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems

WestJet, Canada's second-largest airline, is looking into a cyberattack that has affected some internal systems during its response to the...
Read More
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems

Paraguay 7.4 Million Citizen Records Leaked on Dark Web

Resecurity found 7.4 million records of Paraguayan citizens' personal information leaked on the dark web today. Last week, cybercriminals attempted...
Read More
Paraguay 7.4 Million Citizen Records Leaked on Dark Web

High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation

HashiCorp has revealed a critical vulnerability in its Nomad tool that may let attackers gain higher privileges by misusing the...
Read More
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation

SoftBank: Over 137,000 personal info leaked

SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked...
Read More
SoftBank: Over 137,000 personal info leaked

Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code

Serious security vulnerabilities in Trend Micro Apex One could allow attackers to inject malicious code and elevate their privileges within...
Read More
Alert  Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code

Turns out, it doesn’t. The password you copied just sits there on your clipboard in plain text. Indefinitely.

“I copy passwords from my password manager all the time,” a user wrote on the US Samsung Community board.

“They’re long and complex… How is it that Samsung’s clipboard saves everything in plain text with no expiration? That’s a huge security issue.”

And the user is not wrong.

Samsung’s clipboard, baked deep into its One UI system, is a user interface developed by Samsung Electronics for its smart devices running Android 9 and later.

Clipboard logs everything you copy – passwords, bank info, private messages, that embarrassing breakup paragraph you never sent.

It doesn’t matter if you use Gboard, which is known to delete the clipboard within an hour, or a third-party keyboard – the history of your copy/pastes is still saved under Samsung’s jurisdiction. There’s no option to auto-delete it.

“There should at least be an option to auto-delete clipboard history after a few hours,” the user added.

“Right now, the only option is to manually go in and delete sensitive stuff… That’s wild,” the user complained

Samsung’s response:

“You’ve raised a valid concern… There’s no built-in setting to auto-delete clipboard contents after a certain period, which can indeed pose a security risk,” responded a Samsung moderator on the community board.

“We agree that adding options such as auto-clear clipboard after X minutes/hours or excluding sensitive apps from clipboard history would be valuable enhancements,” the moderator said. They promised to forward the feedback “to the appropriate team.”

For the time being, their best advice is to delete your clipboard manually and “use secure input methods directly from your password manager.”

Why does it actually matter?

If someone picks up your unlocked phone and checks the clipboard, it’s all there waiting. Or worse, an info-stealing malware is constantly lurking, ready to siphon data straight from your clipboard

Clipboards are a goldmine for hackers. Malicious software like StilachiRAT literally exists to monitor clipboards, hunting for passwords, crypto wallet keys, and any sensitive text it can quietly steal.

Recently, attackers infiltrated European military networks, using the Remote Desktop Protocol to access clipboard data from infected systems.

They weren’t guessing passwords, they were watching people copy and paste them.

If state-sponsored cybercriminals are lurking in your clipboard, maybe it’s time we took it a little more seriously.

Even some apps, like TikTok, have been caught quietly reading clipboard data in the background.

Clipboard tech hasn’t kept up with the sensitivity of what we’re pasting. It’s holding passwords, two-factor codes, crypto addresses, and private URLs – all stored in plain text.

Source: Cybernews

Check Also

Apex One

Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code

Serious security vulnerabilities in Trend Micro Apex One could allow attackers to inject malicious code …

Leave a Reply

Your email address will not be published. Required fields are marked *