How could the contents of multiple LastPass vaults be compromised?

According to this newly published article:

Now, it appears that the LastPass hack has led cybercriminals to steal over $35 million in cryptocurrencies.

Nick Bax, director of analytics at Unciphered, has been reviewing a huge quantity … Continue reading How could the contents of multiple LastPass vaults be compromised?

Is there a good reason offline brute force attacks work on the lastpass database of random passwords? [closed]

It is reported that it seems people are brute forcing the lastpass database and extracting cryptocurrency seeds.

A basic functionality of LastPass is that it will pick and remember lengthy, complex passwords for each of your websites or o… Continue reading Is there a good reason offline brute force attacks work on the lastpass database of random passwords? [closed]

Infosec products of the month: August 2023

Here’s a look at the most interesting products from the past month, featuring releases from: Action1, Adaptive Shield, Bitdefender, Bitwarden, Forescout, ImmuniWeb, Kingston Digital, LastPass, Lineaje, LOKKER, Menlo Security, MongoDB, Netskope, NetSPI,… Continue reading Infosec products of the month: August 2023

Building a secure future without traditional passwords

As organizations try to fortify their defenses against an increasingly sophisticated threat landscape, traditional password-based systems reveal their limitations. This is where passwordless authentication steps in – a concept that simplifies access wi… Continue reading Building a secure future without traditional passwords

New infosec products of the week: August 11, 2023

Here’s a look at the most interesting products from the past week, featuring releases from Adaptive Shield, LastPass, NetSPI, Solvo, ThreatConnect, and Vicarius. NetSPI launches ML/AI Pentesting solution to help organizations build more secure models N… Continue reading New infosec products of the week: August 11, 2023

LastPass removes the master password from customers’ login with FIDO2 authenticators

LastPass announced the availability of FIDO2 authenticators, including biometrics, such as finger print or face ID, and hardware keys, for its Passwordless Login solution. This innovation allows LastPass customers to experience a seamless passwordless … Continue reading LastPass removes the master password from customers’ login with FIDO2 authenticators

This Week in Security: Minecraft Fractureiser, MOVEit, and Triangulation

Modded Minecraft is having a security moment, to match what we’ve seen in the Python and JavaScript repositories over the last few months. It looks like things started when a …read more Continue reading This Week in Security: Minecraft Fractureiser, MOVEit, and Triangulation