It’s essentially where all the intellectual property for a software-based company is stored. This attack appears to have targeted the LastPass development environment where the company writes, stores, and manages its source code. How could this be worse than my passwords being stolen? This is a good thing! Unfortunately, this type of attack is potentially more dangerous than a data breach where a set of point-in-time passwords was stolen. According to the LastPass press release no passwords appear to have been stolen or accessed. But, let’s take this at face value right now. Other than that, there are no other details, which is a bit concerning. You can find the LastPass official blog post here: LastPass says that no passwords or vault material was accessed.
LASTPASS SECURITY CHALLENGE GONE CODE
LastPass is saying that a single developer’s account was compromised and that source code and some “proprietary LastPass technical information” was accessed.The attack happened two weeks ago and targeted its development environment.We don’t know which IR firm they’ve hired. LastPass alerted its customers yesterday that there had been a security incident and that they had hired an incident response company.This time, the attack vector is different than previous incidents, so let’s drill into what happened. You can see the list of historical security incidents here. In addition, there have been a number of other security events where security researchers have identified vulnerabilities in the LastPass platform that could have led to data loss or password compromise. LastPass has publicized that it’s been hacked at least 4 times: in 2011, 2015, 2021, and now in 2022. LastPass, just sent an email to its customers saying that it has been hacked. LastPass was hacked and their source code was stolen.
0 kommentar(er)
