Security is an ever-growing challenge affecting all parties and we need highly encrypted solutions like these (unless you somehow know how to build your own highly-encrypted in-house solution). However, that doesn’t mean you shouldn’t use them. These companies/services make for a hot target for hackers as it would be like hitting the motherload if they can gain access to the saved passwords eventually. Sadly, incidents like these are somewhat expected as users entrust such private data to a single source like this. Customer passwords remain safely encrypted due to LastPass’s Zero Knowledge architecture. We recently detected unusual activity within a third-party cloud storage service, which is currently shared by both LastPass and its affiliate GoTo. The company has hired a security firm to assist in the investigation to determine what information was accessed this round.
However, LastPassdoesn’t seem to be sure about what information was accessed exactly. Thankfully, the company did say that password information remained safe. This would make for a gold mine for hackers. If this data were to be fully leaked, attackers would be able to gain access to every website a user has stored credentials for. What makes this so unfortunate is that users make use of these services to help better secure themselves on other websites and services. This time, it was a repeat incident using knowledge gained in the previous attack (August 2022), allowing attackers back in for a second round. In another unfortunate data breach, hackers seem to have once again gained access to LastPass’s servers.
0 kommentar(er)
