LastPass in the Media

ShinyHunters claims it's behind ongoing Salesforce Aura data theft assault, warns more attacks to come

Salesforce says no bugs being exploited, but the hackers claim otherwise.

Mar 10, 2026

The Register AI-ML

ShinyHunters claims more high-profile victims in latest Salesforce customers data heist

And they abused a Mandiant-developed open source tool in the attacks ShinyHunters told The Register that it has stolen data from about 100 high-profile companies in its latest Salesforce customer data heist, including Salesforce itself.…

Mar 9, 2026

SecurityWeek

Internet Infrastructure TLD .arpa Abused in Phishing Attacks

Abusing DNS record management controls, the threat actor hides the location of malicious content via Cloudflare. The post Internet Infrastructure TLD .arpa Abused in Phishing Attacks app

Mar 9, 2026

The Register AI-ML

FBI is investigating breach that may have hit its wiretapping tools

PLUS: Europol takes down two crime gangs; LastPass users phished (again); Crooks increase crypto hauls; And more Infosec In Brief The FBI is investigating a breach of its systems which reportedly affected systems related to wiretapping and surveillance.…

Mar 8, 2026

PCMagTech Media

Hackers Are Trying to Steal LastPass Vault Details With Fake Support Emails

The emails ask the user to take some kind of action, such as disconnecting or locking their vault.

Mar 6, 2026

LastPass warns of scam using fake email chains spoofing account hacking 'to draw attention and generate urgency' in users

What would you do if you could eavesdrop on an ongoing social engineering attack against your LastPass account?

Mar 6, 2026

LastPass Review: Features, Pricing, Security, and Who It’s Best For

Read our LastPass review covering pricing, security, features, pros and cons, and whether LastPass is safe or free. The post LastPass Review: Features, Pricing, Security, and Who It’s Best For appeared first on <a href="h

Mar 5, 2026

GBHackers

Cyberattack Alert: Hackers Impersonate LastPass Support to Steal Vault Passwords

A new phishing campaign impersonating LastPass support emails is targeting users to steal their vault passwords and account credentials. The phishing campaign uses fake email chains that appear to be forwarded internal messages about suspicious account activity. Attackers craft messages to make i

Mar 5, 2026

BleepingComputer

Fake LastPass support email threads try to steal vault passwords

Password management software provider LastPass is warning users of a phishing campaign targeting its users with fake unauthorized account access alerts. [...]

Security Affairs

LastPass warns of spoofed alerts aimed at stealing master passwords

LastPass warns of a phishing campaign using fake security alerts about unauthorized access or password changes to steal users’ master passwords. LastPass has warned users about a new phishing campaign using fake security alerts that claim unauthorized access or master password changes. The emails, w

ForbesMajor Publication

LastPass Issues New Account Password Warning—Attacks Are Underway

LastPass has confirmed a new and ongoing attack that began on March 1 and targets user account credentials. Here’s what you need to know and do.

SecurityWeek

LastPass Warns of New Phishing Campaign

The attackers are sending out fake alerts claiming unauthorized access or master password changes. The post LastPass Warns of New Phishing Campaign appeared first on S

CyberInsider

LastPass warns of fake security alerts targeting account credentials

LastPass has warned customers about an ongoing phishing campaign that impersonates the company using fake email threads designed to trick recipients into revealing their credentials. The company says the activity began around March 1, 2026, and notes that its own systems were not compromised. Las

ZDNetTech Media

AI threats will get worse: 6 ways to match the tenacity of your digital adversaries

Don't wait until AI-enabled deepfakes and malware overwhelm your organization. Experts recommend these aggressive best practices for hardening your defenses.

Mar 2, 2026

Secure your business for less with 30% off LastPass plans

Deploy LastPass today and save 30%

Mar 2, 2026

February 2026

Hackread

5 IoT Vulnerabilities That Stop Projects and How to Avoid Them

Stop the 75% failure rate. Learn which device vulnerabilities stall deployments and the exact fixes that get IoT projects to production.

Feb 28, 2026

Hackread

$300 a Month Android Malware ‘Oblivion’ Uses Fake Updates to Hijack Phones

Cybersecurity researchers at Certo reveal Oblivion, a new Android Trojan targeting major brands like Samsung and Xiaomi. It bypasses security to steal passwords and bank codes.

Feb 25, 2026

TechTimes

How to Recover a Hacked or Compromised Google Account and Secure Your Data

Learn how to recover a hacked Google account, recognize warning signs, and secure your account with step-by-step guidance and advanced recovery tips.

Feb 23, 2026

CyberInsider

New “Sandworm_Mode” worm unleashed on the npm ecosystem

A newly uncovered npm supply chain attack dubbed “SANDWORM_MODE” is spreading through typosquatted packages, infecting developer machines and CI pipelines while targeting AI coding assistants for further compromise. Socket researchers detailed an active worm distributed through at least 19 malici

Feb 23, 2026

Schneier on Security

On the Security of Password Managers

Good article on password managers that secretly have a backdoor. New research shows that these claims aren’t true in all cases, particularly when ac

Feb 23, 2026

WiredMajor Publication

Password Managers Share a Hidden Weakness

Plus: The cybersecurity community grapples with Epstein files revelations, the US State Department plans an online anti-censorship “portal” for the world, and more.

Feb 21, 2026

Windows Central

"The majority of the attacks allow recovery of passwords" — New research suggests your favorite password manager might not be as secure as you thought

A new paper posits that major password managers are vulnerable to several different types of attack, with results as severe as complete vault takeovers. Here's what you need to know.

Feb 19, 2026

WinBuzzer

Edge 145 Rolls Out with Password Upgrades and Security Patches

Microsoft has released Edge 145 with password ma

Feb 19, 2026

SecurityWeek

Password Managers Vulnerable to Vault Compromise Under Malicious Server

Researchers at ETH Zurich have tested the security of Bitwarden, LastPass, Dashlane, and 1Password password managers. The post Password Managers Vulnerable to Vault Compromise Un

Feb 17, 2026

How to Choose a Password Manager for Your Business

Learn how to choose a business-ready password manager by evaluating security, admin controls, scalability, and integration with identity systems. The post How to Choose a Password Manage

Feb 17, 2026

GBHackers

25 Vulnerabilities Found in Cloud Password Managers, Exposing Users to Unauthorized Access and Changes

The three major cloud-based password managers, such as Bitwarden, LastPass, and Dashlane, collectively serve approximately 60 million users. Despite marketing claims of “zero-knowledge encryption,” the research team demonstrated that these platforms contained vulnerabilities allowing

Feb 17, 2026

The Rise of Credential Stuffing Attacks

Credential stuffing attacks use stolen passwords to log in at scale. Learn how they work, why they’re rising, and how to defend with stronger authentication. The post The Rise of Credential Stuffin

Infosecurity Magazine

Vulnerabilities in Password Managers Allow Hackers to View and Change Passwords

Security researchers have challenged end-to-end encryption claims from popular commercial password managers

The Register AI-ML

You probably can't trust your password manager if it's compromised

Researchers demo weaknesses affecting some of the most popular options Academics say they found a series of flaws affecting three popular password managers, all of which claim to protect user credentials in the event that their servers are compromised.…

Techxplore

Why 'zero-knowledge encryption' may not stop password theft if servers are hacked

People who regularly use online services have between 100 and 200 passwords. Very few can remember every single one. Password managers are therefore extremely helpful, allowing users to access all their passwords with just a single master password.

CyberInsider

Popular password managers fall short of “zero-knowledge” claims

Researchers from ETH Zurich have identified serious architectural weaknesses in three leading cloud-based password managers, Bitwarden, LastPass, and Dashlane, demonstrating that a fully compromised server could expose and even modify users’ stored credentials. Collectively, Bitwarden, LastPass,

TechTimes

Strong Passwords Made Easy: Create Secure, Memorable Passwords That Protect Your Accounts

Learn how to create strong passwords that are secure yet memorable using passphrases, substitutions, site-specific tweaks, and password managers.

BleepingComputer

AMOS infostealer targets macOS through a popular AI app

AMOS infostealer is targeting macOS users by abusing popular AI apps and extension marketplaces to harvest credentials. Flare examines how AMOS operates, spreads through AI-driven lures, and feeds the broader stealer-log cybercrime economy. [...]

Feb 12, 2026

Why Every Small Business Needs a Password Manager

Small businesses are prime targets for credential attacks. Learn why a password manager is essential for reducing risk, improving security, and saving time. The post Why Every Small Busin

Feb 11, 2026