LastPass data breach is worse than first thought; user data and password vaults grabbed by hackers
Password management firm LastPass has issued an update about a security breach that was first revealed back in August. The news is not good; the data breach is significantly worse than initial reports suggested.
LastPass says that its investigations into the incident now show that the hackers were able to obtain customer vault data. The company points out that these vaults are home to both encrypted and unencrypted data, and tries to play down the significance of a threat actor gaining access to unencrypted data.
LastPass suffers a security breach: hackers steal source code from password management company
LastPass, the firm behind the eponymous password management software, has revealed that it fell victim to a security breach two weeks ago. Although the company is quick to point out that passwords stored by users have not been exposed, the incident remains hugely significant.
The hackers were able to breach the security of a developer account and took advantage of this to steal "source code and some proprietary LastPass technical information". While LastPass is at pains to stress that it has seen "no evidence that this incident involved any access to customer data or encrypted password vaults" it is an incident that will nonetheless dent user confidence.
Google revamps its Password Manager for better protection and ease of use
Passwords. Despite numerous predictions of their demise we still can't live without them. Using strong passwords though, especially if you have several devices, means using a password manager to help you keep track.
Google Password Manager has been around in Chrome since 2008, but it's always offered a somewhat different experience on desktop and mobile devices. Until now that is.
Keeper launches secure one-time password sharing
We all know that you shouldn't share passwords. But we also know that there are occasions when it's useful to do so -- giving temporary access to a Wi-Fi network example or sharing data with contractors.
Keeper Security has come up with an innovative solution that allows users to securely share records with anyone on a time-limited basis.
Smaller businesses acknowledge increased cyber threats but few do anything about it
While 83 percent of respondents to a new survey of small and medium businesses agree that they have seen an increased awareness of cybersecurity in their organization, only 36 percent have adopted new security policies.
The report from Dashlane is based on a survey of more than 600 employees and managers and over 300 IT decision makers (leaders) at SMBs across multiple industries.
The password is dead -- long live the password!
As long ago as 2004 no less a figure than Bill Gates was predicting the death of the password. But here we are almost 20 years on and passwords are still the primary authentication method.
So passwords look set to be with us for a while yet, however, 90 percent of internet users are worried about getting their passwords hacked. Cybersecurity company Ping Identity has been looking at passwords and how to use them safely for both businesses and consumers.
Is it time to swap your password for a QR code?
Yesterday we reported on the introduction of the passwordless password manager, but as ever in the security industry other companies are never far behind a new innovation. Today LogMeOnce introduces a patented passwordless authentication method using a QR code.
With QR Code Login, rather than having to use or enter a master password to unlock the password manager, when a user wants to log into a web account, a unique QR Code will appear on the computer monitor screen. Users then use a mobile phone to scan the code and they are securely authenticated.
LastPass launches passwordless password manager
For a company whose business is to protect passwords, going passwordless might seem a bit self-defeating, but stick with us, because there is method in this madness.
LastPass is announcing that its customers can now access their vault, and all sites stored in it, with a simple and secure passwordless login using the LastPass Authenticator.
World Password Day helps to raise security awareness
The death of the password is something that has been predicted for a very long time. But the venerable means of securing our accounts still clings tenaciously to life.
Today's World Password Day is designed to raise awareness of the continued importance of passwords and the need -- where we do still use them -- to change them and to choose strong words that are not easy to hack.
Brits have more online accounts but stick with the same old passwords
Since the start of the pandemic, the number of online accounts Britons now have has almost doubled -- going up from 18 to 32, but their password habits haven't improved.
New research from F-Secure ahead of Thursday's World Password Day shows 75 percent of Brits could be putting their finances and savings at risk by using the same password for their online banking as for other online accounts.
1Password launches new tools to help developers build secure software
Generating, managing and accessing secrets within development workflows can be a complex process and lead to the inadvertent introduction of risks.
Security and privacy specialist 1Password is launching a new set of developer tools that aim to simplify complex processes and improve security practices to ensure data is protected, without slowing down the development pipeline. This will also provide developers with secure access to the secrets they need wherever they are.
1Password breaks the bug bounty record by offering a million dollar reward
Password manager company 1Password is increasing its top bug bounty reward to $1 million, making it the highest bounty in Bugcrowd history and one of the largest rewards in cybersecurity.
Since beginning the bug bounty program in 2017, 1Password has paid out $103,000 to Bugcrowd researchers, averaging $900 per reward. While all detected bugs have been minor, showing no threat to the secrecy of sensitive customer data, 1Password was able to resolve them quickly to reduce the risk of attacks.
Bitdefender launches new password manager for consumers
We all know that we should use complex passwords and different ones for each account but managing them is undoubtedly a chore. It's no surprise then that Bitdefender research shows 50 percent of people use a single password for all online accounts and 32 percent reuse just a few passwords across multiple accounts.
To simplify the creation and management of secure passwords for online accounts across multiple platforms, including mobile, Bitdefender is today launching its own Password Manager.
LastPass says master password leak warnings were sent in error
LastPass users around the world were thrown into a state of panic after the company issued email warning about unauthorized use of master passwords.
The password manager company advised users of suspicious login attempts using the master password associated with their account. This led to concerns that the company has been hacked or that passwords had been leaked, but LastPass says that the warnings were erroneous.
What's your password personality?
Nearly half (49 percent) of US employees create their own tricks and shortcuts for managing logins, leaving business systems open to attack.
A new report from password manager company Dashlane, created in conjunction with Datalands and based on a survey of 1,000 people, identifies four different employee personas, and the potential barriers these employees may cause to security culture.
Recent Headlines
Most Commented Stories
© 1998-2025 BetaNews, Inc. All Rights Reserved. About Us - Privacy Policy - Cookie Policy - Sitemap.