(Arguably, these events are all part of a single breach.) Although LastPass’s on-premises production environment was not breached, the attacker was able to leverage information captured in an earlier breach of a developer’s account in August 2022 to target another employee’s account in order to steal data from cloud-based storage that LastPass used for backup. LastPass has been fairly transparent about the breach, posting when it happened and following up this week with additional details. This safeguard should prevent the attackers from decrypting the stolen usernames and passwords. This could be a nightmare situation for LastPass, but most users shouldn’t be at significant risk because the company’s Zero Knowledge security architecture prevents it from having access to or knowledge of a user’s master password-the stolen data doesn’t contain any master passwords. LastPass CEO Karim Toubba has announced that the password management company suffered a security breach last month, with attackers making off with unencrypted customer account data and customer vaults containing encrypted usernames and passwords. LastPass Shares Details of Security Breach

1646: Security-focused OS updates, Photos Workbench review, Mastodon client wishlist, Apple-related conferences.

1647: Focus-caused notification issues, site-specific browser examples, virtualizing Windows on M-series Macs.#1648: iPhone passcode thefts, Center Cam improves webcam eye contact, APFS Uncertainty Principle.#1649: More LastPass breach details and 1Password switch, macOS screen saver problem, tvOS 16.3.3 fixes Siri Remote bug.

#1650: Cloud storage changes for Box, Dropbox, Google Drive, and OneDrive quirky printing problem.

Last pass security breach