Connect with us

Tech

LastPass Data Breach — Insufficient Security Exposed 1.6 Million Users

Published

on


Any data breach affecting 1.6 million people is big news, especially when it involves one of the most prominent password managers out there: LastPass. The U.K. Information Commissioner’s Office has just fined LastPass £1.2 million ($1.6 million) for failing to “implement sufficiently robust technical and security measures, which ultimately enabled a hacker to gain unauthorised access to its backup database.” Here’s what you need to know.

ForbesMicrosoft Warning — Act Rapidly And Change Passwords As Attacks Strike

ICO LastPass Breach Fine Is A Watershed Moment For The Cybersecurity Industry

LastPass is one of the best-known password managers, with a consumer user base of over 20 million and 100,000 businesses relying on its services. Perhaps unsurprisingly, then, it is also a prime target for cybercriminals. From a company network intrusion confirmed by LastPass in 2015, through to the latest warnings for users against opportunistic “are you dead” master password hack attacks on users. In 2022, LastPass CEO Karim Toubba announced that an unauthorized party had gained access to “certain elements of our customers’ information,” which sent shivers up the spines of cybersecurity experts and users alike. That 2022 data breach, concerning a third-party cloud storage service, has now come back to bite the business. The U.K. Information Commissioner’s Office, an independent regulatory body that upholds data privacy protections, has confirmed it has fined LastPass a total of £1.2 million ($1.6 million) for the breach that impacted 1.6 million U.K. users alone. LastPass “which promises to help people improve their security,” the ICO said, “has failed them, leaving them vulnerable.”

Although there remains no evidence that the hackers were able to decrypt customer passwords, the ICO concluded that “LastPass failed to implement sufficiently robust technical and security measures, which ultimately enabled a hacker to gain unauthorised access to its backup database.” Despite these failings, LastPass passwords were not affected, and using a password manager remains a recommended security measure for most users.

ForbesMicrosoft And CISA Issue Critical New Alert, Windows Attacks Confirmed

“The ICO’s fine against LastPass is a watershed moment for the cybersecurity industry,” Dan Panesar, chief revenue officer at Certes, said, “because it confirms what many breaches have already shown: the failure point is no longer passwords, it’s what attackers can access once identity is compromised.”

“The bottom line is that security isn’t just tech,” Chris Linnell, associate director of data privacy at Bridewell, said, “it’s governance, staff awareness, and managing supplier risk.” The LastPass case is yet another example of why businesses need to look at the whole picture, “not just the product that’s being sold.”

“LastPass customers had a right to expect the personal information they entrusted to the company would be kept safe and secure,” John Edwards, the U.K. Information Commissioner, said, concluding, “However, the company fell short of this expectation, resulting in the proportionate fine being announced today.”

I have approached LastPass for a statement.

ForbesBeware Of Spiderman-As-A-Service Web Of Attacks



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Samsung May Stop Producing These SSDs Next Year

Published

on


Samsung may be preparing to step away from SATA SSD production. According to multiple industry reports, the company is planning a long-term exit from SATA SSD manufacturing starting next year.

YouTuber Moore’s Law Is Dead (MLID) says several sources have told him Samsung will end SATA SSD production entirely after it fulfills existing contracts.

SATA SSDs can feel like older technology as more new laptops and desktops rely on faster NVMe storage. High-end systems have also moved to SAS (Serial Attached SCSI).

Still, SATA SSDs remain common in 2025. They continue to see demand in budget PCs, external storage, and upgrades for older machines. Retail channels also continue to sell SATA SSDs in large numbers.

YouTube videoYouTube video

Samsung is one of the largest suppliers of finished consumer SSDs. MLID says Samsung-made SSDs make up a significant portion of top-selling products on major online retailers, with roughly one-fifth of those listings still using the SATA interface.

If Samsung removes that supply, the impact may extend beyond one product category. The report suggests the move could tighten availability across the broader SSD market, including NVMe drives.

The report lands as memory pricing faces pressure. Samsung has reportedly raised DDR5 memory prices by as much as 60% recently. Micron has also decided to halt its consumer memory business to focus on supplying memory for high-powered AI chips.

The reports suggest end consumers are likely to feel the effects the most.

For now, Samsung has not made anything official. But if the company does exit SATA SSDs, the report suggests SATA drives could become more expensive and harder to find than many expect.





Source link

Continue Reading

Tech

Pakistan Tops Global Searches for Explicit Content

Published

on



Pakistan continues to rank at the top globally in searches related to indecent content, despite no longer leading in actual viewership, Director General Pakistan Telecommunication Authority (PTA) Dr. Muqarram Ali said while addressing a cybersecurity seminar at the Sustainable Development Policy Institute (SDPI).

He said that following PTA’s actions, including large-scale blocking of indecent websites, a clear impact has been observed, and Pakistan is no longer at the top in terms of viewing such content. He added that Pakistan had previously ranked highest in viewership, but sustained enforcement measures have moved the country down from that position.

Speaking at the event, Dr. Muqarram Ali said the PTA is actively working on online child protection and has blocked around 1.3 million indecent websites. He stated that the authority only blocks immoral and unethical material and does not act proactively to shut down websites on its own.

He further said that the PTA often receives contradictory court orders, with one court directing the blocking of a platform while another ordering that it should not be blocked. He added that the authority is bound to follow the prescribed legal and administrative system in such cases.

Referring to the temporary blocking of Wikipedia, the PTA chief said the move triggered an international reaction, after which an inter-ministerial committee was formed to review the issue. He said that the PTA blocks websites strictly on government directives, noting that similar instructions were also issued during previous governments.

Highlighting cyber security developments, Dr. Muqarram Ali said Pakistan has emerged among the top countries in cyber security preparedness. He claimed that during the Pak-India conflict in May, Pakistan won the cyber war and that not a single Pakistani website was taken offline. He also clarified that the PTA does not collect mobile taxes, stating that this responsibility lies with the Federal Board of Revenue (FBR).





Source link

Continue Reading

Tech

Apple’s Edge Light Adds A Virtual Ring Light To Your Mac Video Calls: Here’s How To Use It

Published

on



Apple released a new MacOS update recently. It brings the Edge Light feature to all Apple silicon-powered Macs. Here’s how you can use it on your next video call.



Source link

Continue Reading

Trending