Password manager LastPass hacked again for 2nd time this yeay

Password


New Delhi, Dec 1 : Karim Toubba, the CEO of popular encrypted password manager LastPass, has admitted the company is investigating a security incident after its systems were compromised for the second time this year. The company detected unusual activity within a third-party cloud storage service, which is currently shared by both LastPass and its affiliate, GoTo. "We immediately launched an investigation, engaged Mandiant, a leading security firm, and alerted law enforcement," Toubba said in a statement late on Wednesday. The earlier security breach in August this year had allowed hackers internal access to the company's systems for four days until they were detected and evicted. Toubba said that an unauthorised party, using information obtained in the August 2022 incident, was again able to gain access to certain elements of "our customers' information". "Our customers' passwords remain safely encrypted due to LastPass's Zero Knowledge architecture," said the CEO. "We are working diligently to understand the scope of the incident and identify what specific information has been accessed. In the meantime, we can confirm that LastPass products and services remain fully functional," he informed. LastPass is a freemium password manager that stores encrypted passwords online. The company does not have any access to the master passwords of its customers' vaults. "Without the master password, it is not possible for anyone other than the owner of a vault to decrypt vault data as part of our Zero Knowledge security model," according to the CEO. He said that the company continues to deploy enhanced security measures and monitoring capabilities across its infrastructure to help detect and prevent further threat actor activity. /IANS




Related

Microsoft to auto upgrade Windows 11 old version to new version
San Francisco, Jan 28 : Microsoft has announced that users running the original version of Windows 11, known as version 21H2, will be automatically up

Apple's new software to offer anyone build AR apps
San Francisco, Jan 28 : Apple is developing software that will give users an easier way to create their own augmented reality (AR) apps on its upcomin

BMW launches its 3rd gen BMW X1 in India
New Delhi, Jan 28 : Luxury car maker BMW on Saturday launched the all-new BMW X1 sports activity vehicle (SAV) in both petrol and diesel variants for