Another vulnerability that can expose master passwords in KeePass has surfaced, after one was discovered to start the year. The new security exploit involves traces of the password being left in system memory, and potentially reassembled if the memory is dumped.
Popular password manager LastPass has confirmed that a previously reported November security incident was a data breach that resulted in the theft of customer data, including encrypted password vaults.
Password manager LastPass notified its customers of a second security breach in 2022, with the threat actor accessing customer data stored on a shared cloud service.
Are Password Managers the Missing Link When It Comes To Protecting Organizations From Cyber Attacks?
Why is it that despite their proven ability to control password hygiene by generating strong and unique passwords, auto-filling passwords, and credentials, storing passwords and files, and auditing password security, 70% of organizations are still not using a password manager?
Recent security breach at password manager LastPass does not appear to be an immediate threat to the encrypted vaults that customers use to store their passwords, but the hackers may have made off with source code and proprietary information.
Password Manager LastPass says no master password was compromised after multiple users received unauthorized login alerts. The company blamed credential stuffing and system errors.