{"id":13315,"date":"2022-08-27T14:40:45","date_gmt":"2022-08-27T14:40:45","guid":{"rendered":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/"},"modified":"2022-08-27T14:40:46","modified_gmt":"2022-08-27T14:40:46","slug":"lastpass-confirms-attackers-stole-some-source-code","status":"publish","type":"post","link":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/","title":{"rendered":"LastPass confirms attackers stole some source code"},"content":{"rendered":"<p>Source: <a href=\"https:\/\/www.theverge.com\/2022\/8\/26\/23323738\/lastpass-security-incident-source-code\">https:\/\/www.theverge.com\/2022\/8\/26\/23323738\/lastpass-security-incident-source-code<\/a><br \/>\n<code><br \/><\/br><\/code><\/p>\n<div readability=\"60.728504870817\">\n<p id=\"2T7pbX\">Earlier this week, LastPass started notifying its users of a \u201crecent security incident\u201d where an \u201cunauthorized party\u201d used a compromised developer account to access parts of its password manager\u2019s source code and \u201csome proprietary LastPass technical information.\u201d In <a href=\"https:\/\/blog.lastpass.com\/2022\/08\/notice-of-recent-security-incident\/\">a letter to its users<\/a>, the company\u2019s CEO Karim Toubba explains that its investigation hasn\u2019t turned up evidence that any user data or encrypted passwords were accessed. <\/p>\n<p id=\"apJumV\">Toubba continues on to explain that the company has \u201cimplemented additional enhanced security measures\u201d after containing the breach, which it detected two weeks ago. The company wouldn\u2019t comment on how long the breach had been going on before it was detected.<\/p>\n<div class=\"c-float-right\">\n<aside id=\"DtM524\"><q>Don\u2019t panic, LastPass users<\/q><\/aside>\n<\/div>\n<p id=\"WMmlJq\">As LastPass explains, at this point its users don\u2019t have to do anything \u2014 there\u2019s no reason for you to spend an afternoon changing your master password and doing a full security audit. LastPass, on the other hand, probably has its work cut out for it making sure that it doesn\u2019t have to make any changes now that an unauthorized party may have access to its source code. <\/p>\n<p id=\"hZLvuo\">To be clear, hackers having access to a program\u2019s source code doesn\u2019t immediately mean they can instantly pwn it, breaking through its defenses. Famously, <a href=\"https:\/\/www.theverge.com\/2022\/3\/22\/22991409\/lapsus-microsoft-security-windows-source-code\">Microsoft says<\/a> it doesn\u2019t rely on its source code remaining private for security and says that people being able to read it shouldn\u2019t be a risk (which is a good thing because its source code <a href=\"https:\/\/twitter.com\/GossiTheDog\/status\/1563160224080732163?s=20&#038;t=Bb-MuXLxCqPlpF7vcYV67g\">leaks a <em>lot<\/em><\/a>). And while that should be the case for any company, especially ones whose entire deal is keeping your passwords safe, I\u2019d probably want the company to be poring over its code just to make sure there aren\u2019t any subtle vulnerabilities that it missed if I were a LastPass customer.<\/p>\n<p id=\"HX77Zm\">Despite the fact that the breach doesn\u2019t seem to be a red alert for security problems at the company, it\u2019s still not a great look for a password manager that\u2019s been struggling with its reputation. It\u2019s just the latest in a <a href=\"https:\/\/www.theverge.com\/2015\/6\/15\/8785481\/lastpass-security-notice-hack-password-manager\">line<\/a> <a href=\"https:\/\/www.theregister.com\/2019\/09\/16\/lastpass_vulnerability\/\">of<\/a> <a href=\"https:\/\/www.theverge.com\/2021\/12\/28\/22857485\/lastpass-compromised-breach-scare\">incidents<\/a> for LastPass (the software\u2019s Wikipedia page is <a href=\"https:\/\/en.wikipedia.org\/wiki\/LastPass#Security_issues\">largely comprised<\/a> of a section titled \u201csecurity issues\u201d), and the company also earned the ire of many users for <a href=\"https:\/\/www.theverge.com\/2021\/3\/16\/22333891\/lastpass-free-changes-bitwarden-zoho-password-manager\">changing its free tier to be significantly less useful<\/a> in early 2021.  <\/p>\n<aside id=\"NKc0I3\">\n<\/aside>\n<\/div>\n<p><code><br \/><\/br><\/code><\/p>\n<p>Source: <a href=\"https:\/\/www.theverge.com\/2022\/8\/26\/23323738\/lastpass-security-incident-source-code\">https:\/\/www.theverge.com\/2022\/8\/26\/23323738\/lastpass-security-incident-source-code<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Source: Earlier this week, LastPass started notifying its users of a \u201crecent security incident\u201d where an \u201cunauthorized party\u201d used a compromised developer account to access parts of its password manager\u2019s source code and \u201csome proprietary LastPass technical information.\u201d In a letter to its users, the company\u2019s CEO Karim Toubba explains that its investigation hasn\u2019t turned [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":13316,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","om_disable_all_campaigns":false,"pagelayer_contact_templates":[],"_pagelayer_content":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[53,8],"tags":[54],"class_list":["post-13315","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apps","category-technology","tag-apps"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>LastPass confirms attackers stole some source code - Science and Nerds<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LastPass confirms attackers stole some source code - Science and Nerds\" \/>\n<meta property=\"og:description\" content=\"Source: Earlier this week, LastPass started notifying its users of a \u201crecent security incident\u201d where an \u201cunauthorized party\u201d used a compromised developer account to access parts of its password manager\u2019s source code and \u201csome proprietary LastPass technical information.\u201d In a letter to its users, the company\u2019s CEO Karim Toubba explains that its investigation hasn\u2019t turned [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/\" \/>\n<meta property=\"og:site_name\" content=\"Science and Nerds\" \/>\n<meta property=\"article:published_time\" content=\"2022-08-27T14:40:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-08-27T14:40:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/lastpass-confirms-attackers-stole-some-source-code_630a2ced6faf5.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/\",\"url\":\"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/\",\"name\":\"LastPass confirms attackers stole some source code - Science and Nerds\",\"isPartOf\":{\"@id\":\"https:\/\/scienceandnerds.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/lastpass-confirms-attackers-stole-some-source-code_630a2ced6faf5.jpeg?fit=1200%2C628&ssl=1\",\"datePublished\":\"2022-08-27T14:40:45+00:00\",\"dateModified\":\"2022-08-27T14:40:46+00:00\",\"author\":{\"@id\":\"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e\"},\"breadcrumb\":{\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/#primaryimage\",\"url\":\"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/lastpass-confirms-attackers-stole-some-source-code_630a2ced6faf5.jpeg?fit=1200%2C628&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/lastpass-confirms-attackers-stole-some-source-code_630a2ced6faf5.jpeg?fit=1200%2C628&ssl=1\",\"width\":1200,\"height\":628},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/scienceandnerds.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"LastPass confirms attackers stole some source code\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/scienceandnerds.com\/#website\",\"url\":\"https:\/\/scienceandnerds.com\/\",\"name\":\"Science and Nerds\",\"description\":\"My WordPress Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/scienceandnerds.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/scienceandnerds.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/scienceandnerds.com\"],\"url\":\"https:\/\/scienceandnerds.com\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LastPass confirms attackers stole some source code - Science and Nerds","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/","og_locale":"en_US","og_type":"article","og_title":"LastPass confirms attackers stole some source code - Science and Nerds","og_description":"Source: Earlier this week, LastPass started notifying its users of a \u201crecent security incident\u201d where an \u201cunauthorized party\u201d used a compromised developer account to access parts of its password manager\u2019s source code and \u201csome proprietary LastPass technical information.\u201d In a letter to its users, the company\u2019s CEO Karim Toubba explains that its investigation hasn\u2019t turned [&hellip;]","og_url":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/","og_site_name":"Science and Nerds","article_published_time":"2022-08-27T14:40:45+00:00","article_modified_time":"2022-08-27T14:40:46+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/lastpass-confirms-attackers-stole-some-source-code_630a2ced6faf5.jpeg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/","url":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/","name":"LastPass confirms attackers stole some source code - Science and Nerds","isPartOf":{"@id":"https:\/\/scienceandnerds.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/#primaryimage"},"image":{"@id":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/lastpass-confirms-attackers-stole-some-source-code_630a2ced6faf5.jpeg?fit=1200%2C628&ssl=1","datePublished":"2022-08-27T14:40:45+00:00","dateModified":"2022-08-27T14:40:46+00:00","author":{"@id":"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e"},"breadcrumb":{"@id":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/#primaryimage","url":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/lastpass-confirms-attackers-stole-some-source-code_630a2ced6faf5.jpeg?fit=1200%2C628&ssl=1","contentUrl":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/lastpass-confirms-attackers-stole-some-source-code_630a2ced6faf5.jpeg?fit=1200%2C628&ssl=1","width":1200,"height":628},{"@type":"BreadcrumbList","@id":"https:\/\/scienceandnerds.com\/2022\/08\/27\/lastpass-confirms-attackers-stole-some-source-code\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/scienceandnerds.com\/"},{"@type":"ListItem","position":2,"name":"LastPass confirms attackers stole some source code"}]},{"@type":"WebSite","@id":"https:\/\/scienceandnerds.com\/#website","url":"https:\/\/scienceandnerds.com\/","name":"Science and Nerds","description":"My WordPress Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/scienceandnerds.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/scienceandnerds.com\/#\/schema\/person\/ea2991abeb2b9ab04b32790dff28360e","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/scienceandnerds.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7e6e14fc6691445ef2b2c0a3a6c43882?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/scienceandnerds.com"],"url":"https:\/\/scienceandnerds.com\/author\/admin\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/scienceandnerds.com\/wp-content\/uploads\/2022\/08\/lastpass-confirms-attackers-stole-some-source-code_630a2ced6faf5.jpeg?fit=1200%2C628&ssl=1","_links":{"self":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts\/13315"}],"collection":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/comments?post=13315"}],"version-history":[{"count":1,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts\/13315\/revisions"}],"predecessor-version":[{"id":13317,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/posts\/13315\/revisions\/13317"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/media\/13316"}],"wp:attachment":[{"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/media?parent=13315"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/categories?post=13315"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scienceandnerds.com\/wp-json\/wp\/v2\/tags?post=13315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}