#podpodcast #openSourceSecurity
Episode 356 - LastPass ducked up, now what?
https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_356_LastPass_ducked_up_now_what.mp3?dest-id=542864
#episode #lastpass #ducked
Josh and Kurt talk about the LastPass saga. There's a lot of great explanations about what happened, but there hasn't been a lot of info on how to start cleaning up this mess. We rehash some of the existing details then try to untangle what existing users can do to try to start recovering. The real problem is how LastPass is dealing with this, not the technical details. Show Notes Great writeup of LastPass Jeremi M Gosney Mastodon explanation Tavis writeup on password managers Use a Passphrase

Feds Link $150M #Cyberheist to 2022 #LastPass Hacks

https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks/

Feds seized $23 million in crypto stolen using keys from LastPass breaches – Source: securityaffairs.com https://ciso2ciso.com/feds-seized-23-million-in-crypto-stolen-using-keys-from-lastpass-breaches-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #CyberCrime #Cybercrime #LastPass #Security #hacking

Feds seized $23 million in crypto stolen using keys from #LastPass breaches
https://securityaffairs.com/175156/cyber-crime/feds-seized-23-million-in-crypto-stolen-using-keys-from-lastpass-breaches.html
#securityaffairs #hacking

If it keeps this up, it'll definitely be the LastPass. If you missed this yesterday.

KrebsonSecurity: Feds Link $150M Cyberheist to 2022 LastPass Hacks https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks/ @briankrebs #cybersecurity #infosec #LastPass

Previously:

December 22, 2022:

LastPass 12-22-2022: Notice of Security Incident: https://blog.lastpass.com/posts/notice-of-recent-security-incident

December 17, 2024:

Tech Radar: LastPass 2022 hack fallout continues with millions of dollars more reportedly stolen

LastPass* in the Krebs spotlight again for all the wrong reasons...

Feds Link $150M Cyberheist to 2022 LastPass Hacks – Krebs on Security
https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks/

*I remain a LastPass user. Come at me bro.

Feds Link $150M Cyberheist to 2022 LastPass Hacks — https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks/
#HackerNews #Feds #Link #Cyberheist #LastPass #Hacks #Cybersecurity #News #2022

It is inexcusable that there is no way to securely share passwords with one time links from LastPass Enterprise.

#Bitwarden continues to be an excellent choice of #passwordmanager. The browser extension doubles up as a perfectly functional link library too, cuz it lets you store URLs without actually needing an account for the URL - though you can add that later if needed.

I used to use #LastPass but they changed their subscription model in a rather unhelpful way, so I took the trouble to get out of them.

Same story with #Trello - #Atlassian took over and it all went to the dogs. As it turns out, I've reverted to a hardcover notebook instead of Trello. Though with some big personal projects coming up in 2025, I'll consider using an anti-Trello, so long as it's not trying to jump down my neck with advertising.

Hackers have used stolen data from the 2022 LastPass hack incident to launch a series of new attacks on users of the famous password manager.

#lastpass #hacking #hackers #passwordmanagers

https://thedailyjuice.net/lastpass-users-lost-5-4-million-in-massive-attack/

#LastPass 2022 hack fallout continues with millions of dollars more reportedly stolen

https://www.techradar.com/pro/security/lastpass-hacked-users-see-millions-of-dollars-of-funds-stolen

Kriminelle #Lieferkette: Ist der #Passwort-#Tresor erst einmal kompromittiert, lassen die #Folgeschäden nicht lange auf sich warten:

"Die Akteure hinter dem bekannten #Lastpass-Hack von Ende 2022 haben offenkundig mal wieder zugeschlagen und mehrere Nutzer des Passwortmanagers kurz vor Weihnachten um #Kryptowährungen im Wert von mehr als zwölf Millionen US-Dollar erleichtert."

https://www.golem.de/news/weiterer-krypto-diebstahl-lastpass-hacker-erbeuten-an-nur-zwei-tagen-millionen-2412-191833.html

LastPass 2022 hack fallout continues with millions of dollars more reportedly stolen

They used the stolen data to take $5.36 million from 40 crypto wallets.

https://www.techradar.com/pro/security/lastpass-hacked-users-see-millions-of-dollars-of-funds-stolen

Zachxbt Ties $12.38 Million Crypto Drain to Lastpass Breach; 100 Victimized Wallets - A blockchain detective has dropped a bombshell update: hackers linked to the infam... - https://news.bitcoin.com/zachxbt-ties-12-38-million-crypto-drain-to-lastpass-breach-100-victimized-wallets/ #security #lastpass #zachxbt

Fucking hell. Nightmare never ends. #LastPass #Hack #CyberSecurity

If you're using LastPass - it's time to migrate (now). #BitWarden #Dashlane #1Password or even #ProtonPass are all viable alternatives, that (so far) have ZERO incidents. Great for cloud-based alternatives. If you want to keep your password manager local, #KeePass or #KeepassX are fantastic as well.

https://www.techradar.com/pro/security/lastpass-hacked-users-see-millions-of-dollars-of-funds-stolen

LastPass Hackers Drain $5.36M From Over 40 Addresses: ZachXBT - LastPass threat actors have allegedly stolen $5.36 million from more than 40 victim addr... - https://cryptonews.com/news/lastpass-hackers-drain-5-36m-from-over-40-addresses-zachxbt/ #blockchainnews #cryptohacks #lastpass #zachxbt

#LastPass threat actor steals $5.4M from victims just a week before Xmas
#Cybersecurity
https://cointelegraph.com/news/lastpass-threat-actor-steals-over-5-million-from-40-victims

LastPass threat actor steals $5.4M from victims just a week before Xmas - White hat organization Security Alliance (SEAL) urged users to transfer ... - https://cointelegraph.com/news/lastpass-threat-actor-steals-over-5-million-from-40-victims #securityalliance #passwordmanager #whitehathacker #christmasscam #chainabuse #lastpass #telegram #zachxbt #cyvers #seal #meta