Posts

Showing posts with the label Breaches

LassPass Breach

Image
Looking at the LastPass breach... Trust us when we say it is way worse than they want you to believe... So why are we coming back to it again, what's new? There are a few things that are going on here and we do want to mention that it's not the users fault that this occurred. LastPass needs to be accountable for what happened and the quick summary if you've enjoyed too much on the Festive Season (heck we all did!) and don't know what's going on with LastPass….   Back in July/August of 2022, LastPass had a breach, and an attacker managed to construct a well-crafted phishing campaign and managed to gain access to a Dev environment in LastPass, and steal the LastPass source code. Among other things, at the time LastPass informed us all that no customer vaults were affected, that the attacker got access to some source code but it wasn't useful by itself, and that they had already taken measures to contain the breach and stop the access. Well…. 😐 Just