LastPass confirmed another security breach compromised user data, marking the second major incident at the password manager in recent years. The company is investigating the scope of the breach and notifying affected customers.
LastPass disclosed the breach following unauthorized access to its systems. The company has not yet detailed which specific customer information was exposed, but previous incidents at the service have included master passwords and encrypted vault data.
In other security news this week:
Microsoft Infrastructure Takedown: Microsoft coordinated with law enforcement to dismantle infrastructure used by a major infostealer malware operation, disrupting campaigns targeting thousands of organizations globally.
Bolton Guilty Plea: Former National Security Advisor John Bolton pleaded guilty to charges related to retaining classified materials without authorization, resolving his legal case stemming from an investigation into mishandled government documents.
LastPass users are advised to change passwords and monitor accounts for suspicious activity. Security experts continue recommending password managers as essential tools despite breaches, emphasizing the importance of strong master passwords and two-factor authentication across accounts.
Digital scans of over 153 million driver's licenses have appeared on the dark web, potentially exposing sensitive identity data. The FBI is investigating a possible breach involving an ID verification service based in Louisiana.
Norway is considering regulatory measures against camera-enabled wearable headsets, citing serious privacy concerns. The Nordic country aims to address risks posed by devices capable of covert recording.
Dropbox is notifying users of unauthorized account access resulting from an email verification vulnerability in Lenovo's identity system. Attackers exploited the flaw to create fraudulent Lenovo IDs and gain entry to Dropbox accounts.
A California federal grand jury has indicted a Russian national for orchestrating a phishing campaign that infected thousands of freelancers with TVRAT and DarkVNC malware.