Tech
LastPass Suffers Second Major Data Breach in Four Months
|
|
On Wednesday, LastPass confirmed it was breached, a fallout of the August 2022 incident wherein portions of source code and some proprietary LastPass technical information were compromised. The recent breach came to light after the company noticed unusual activity in a third-party cloud storage service it shares with GoTo, its parent company.
In a blog post, LastPass CEO Karim Toubba said the still unknown threat actors accessed “certain elements” of the password manager’s customer information. Toubba didn’t talk about the type of information that was compromised but assured that the passwords of more than 33 million company users and more than 100,000 business accounts remain unaffected.
The August 2022 breach, wherein the hackers had access to LastPass accounts for four days, compromised the source code and some proprietary technical information. What the threat actors obtained in the previously compromised data to breach LastPass again is unknown.
“Since the company claims that the current hack is based on data compromised in the previous hack, this raises the question: Why did they not learn from the earlier hack and correct the root cause?” Mike Walters, VP of vulnerability and threat research at Action1, told Spiceworks. “The trend of repeated hacks, where the company fails to eliminate the consequences of the breach for months, is frustrating.”
In both LastPass breaches this year, the threat actors failed to access customer passwords thanks to the Zero Knowledge security model it has implemented that no one except the customer has access to the password or any other data stored in the company’s digital vault.
The password manager solutions vendor is working with Mandiant to ascertain the precise reason behind the hack. “We are working diligently to understand the scope of the incident and identify what specific information has been accessed,” Toubba said. LastPass’s previous August 2022 breach came through a compromised developer account that had access to the company’s developer environment.
Walters added, “To avoid this mistake, you should take decisive steps to investigate the security incident, as well as to find and fix any and all security vulnerabilities. Namely, carefully examine the investigation report and conduct an in-depth analysis of all architectural issues. Implement robust network segmentation and complete visibility into network traffic and user behavior. Ensure you receive alerts about any abnormal events.”
“Also, validate that your IDS/IPS, Endpoint Protection, EDR, NGFW, Sandbox, Honeypot, and RMM systems are in place and fine-tuned according to your business needs. Finally, you need to have a SOC center for incident response.”
Facebook parent company Meta today announced the upcoming expansion of Meta Horizon OS, a virtual and augmented reality operating system that will be available to third-party hardware manufacturers that want to design their own headsets.
Right now, Meta sells the Quest line of headsets, but the company wants to provide the software for third-party VR and AR products in the future, much like Microsoft offers Windows for all manner of third-party PCs.
Meta Horizon OS is the mixed reality operating system that Meta created for its own Quest headsets, and it has support for eye, face, hand, and body tracking along with passthrough, spatial anchors, scene understanding, and other features. There is a “social layer” that will allow the identities, avatars, and friends of users to move between virtual spaces on different devices.
According to Meta, multiple companies are working on devices that will use Meta Horizon OS. ASUS ROG is developing a performance gaming headset and Lenovo is working on mixed reality devices for productivity, learning, and entertainment. Meta says that it is also creating a limited edition version of Meta Quest in partnership with Xbox.
With the expansion of Meta Horizon OS to third-party hardware manufacturers, Meta is making it easier for any developer to ship VR software on the platform by removing barriers between the Horizon Store and App Lab.
By creating an operating system that can be used by other hardware manufacturers, Meta is inserting itself into the growing AR/VR ecosystem and creating opportunities for it to outpace Apple in mixed reality development. Apple launched the Vision Pro headset earlier this year, but software is lacking given the high price and limited distribution of the device.
According to a report from earlier today, interest in the Vision Pro is already waning at Apple’s retail locations with fewer people requesting demos.
There have been more launches in the past two weeks than any other two-week period I can remember since I started sweeping floors at Freedom Bike Shop back in 2001. Yes, that means I’m very old. It also means that after several years of delayed product releases, some brands have finally cleared out enough inventory to share what they’ve been working on.
The Pinkbike team came down to Sea Otter this year with mixed expectations, and there were definitely some weird vibes. Everyone is concerned for the remaining Kona employees, and more than one brand expressed that their plan is to #surviveto2025. But overall we loved catching up with everyone, the weather was great, and somehow there was even more gear to cover. The industry might be going through a tough time, but ultimately riding bikes is still ridiculously fun and bike tech is as interesting as ever.
And on that note, here are a few of the random things that caught my eye during the show.
OutsideBrendan works smarter not harder, and dog Bubbie(?) is awesome.
I mistakenly thought it was a garage project kind of thing, but it’s a real brand with a promo video and everything.
And with that, it’s time to face my expense report. Until next year, Sea Otter!
Reviews and recommendations are unbiased and products are independently selected. Postmedia may earn an affiliate commission from purchases made through links on this page.
Article content
Skin Caviar Eye Lift Serum
They say: A luxury serum that firms, smooths and lifts the eye area. The dual-chamber product features the Swiss skin-care brand’s Cellular Complex to ‘restore youthfulness to the eye contour,’ along with a blend of caviar components.
We say: Our tester applied one pump of this serum to the eye area daily. Gently dabbed onto skin, the serum gave an instant boost of hydration. The liquid-serum formula was lightweight and non-sticky, providing an easy base for any additional skin-care or makeup products. With use, our tester reported fine lines and firmness were noticeably improved.
Article content
$760 | Holt Renfrew, holtrenfrew.com
Marc Anthony
Strictly Curls Curl Envy Leave-In Conditioner
They say: A leave-in hair conditioner formulated for curly hair. Boasting strand-smoothing ingredients such as avocado oil, Vitamin E and shea butter, the spray can be used on course, fine, thick or thin curls to promote softness, fight frizz and lock in hydration.
We say: Our tester spritzed this conditioner on her ultra-curly, frizz prone coif. The spray format makes application easy and mess-free. Used both as a de-tangler on freshly washed hair and as a curl pick-me-up in between washes, she found it left curls looking formed, smooth and not stiff.
$12.97 | Mass retailers, walmart.ca
Ghlee
Lip Balm
They say: A nourishing lip balm that features antioxidant-rich ghee, along with mango seed butter and Vitamin E to hydrate lips. Available in Original, Rose, Chai, Mango-Papaya and Mint.
We say: This lip balm gives a dose of smoothing hydration with one swipe. Our tester loved the rose iteration, which boasted the scent of a fresh bloom. It’s the kind of balm you keep reaching for in your bag, she reports.
Share this article in your social network
Meet artist J-Positive and the family behind his art store – CBC.ca
Made Right Here: Woodworking art – CTV News Kitchener
We're still stockpiling reusable bags. Big grocers have adopted solutions, but experts have concerns – CBC News
Silver investment demand jumped 12% in 2019
12 Bizarre Things People Did Just To Make Social Media Content
Global Media Markets, 2015-2020, 2020-2025F, 2030F – TV and Radio Broadcasting, Film and Music, Information Services, Web Content, Search Portals And Social Media, Print Media, & Cable – GlobeNewswire
-
Business13 hours ago
Honda to build electric vehicles and battery plant in Ontario, sources say – Global News
-
Science14 hours agoWill We Know if TRAPPIST-1e has Life? – Universe Today
-
Investment17 hours ago
Down 80%, Is Carnival Stock a Once-in-a-Generation Investment Opportunity?
-
Health13 hours ago
Simcoe-Muskoka health unit urges residents to get immunized
-
Health10 hours ago
See how chicken farmers are trying to stop the spread of bird flu – Fox 46 Charlotte
-
News18 hours ago
Honda expected to announce multi-billion dollar deal to assemble EVs in Ontario
-
Sports23 hours ago
Jets score 7, hold off Avalanche in Game 1 of West 1st Round – NHL.com
-
Art23 hours ago
‘Luminous’ truck strap artwork wins prestigious Biennale prize in first for New Zealand – The Guardian
