Protect your corporate IT network from hackers and other unwanted intruders with Proxy Sentinel™. Click here for all the details and get the peace of mind you deserve.
Back to our Homepage Proxy Sentinel™ high performance Internet proxy server and secure firewall solution Firewall Sentinel™ secure & powerful Internet firewall solution About Internet Security.ca and GCIS Frequently Asked Questions on Internet security issues Internet Security Industry News - Stay informed of what's happening Contact Internet Security.ca today and order your Proxy Sentinel™ or Firewall Sentinel™ server now!

Security vulnerability discovered in cloud password vault LastPass

Sponsered ads:
Read the latest IT news. Visit ItDirection.net. Updated several times daily.

If you need reliability when it comes to SMTP servers, get the best, get Port 587.

Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!

Share on Twitter.

July 27, 2016

A critical and very nasty zero-day security vulnerability has been discovered in the popular cloud password vault LastPass.

It's important to note that people are warned this security issue can completely compromise all user account passwords stored in the compromised system.

And it gets worse: several million users can be compromised by simply visiting a malicious website.

This allows hackers complete access to user accounts in which hundreds and thousands of passwords are stored in the LastPass website.

Not much else is known of this critical security hole discovered by white hat security researcher Tavis Ormandy.

Ormandy has also torn apart every major antivirus platform finding even more critical security flaws including a zero-interation remote code execution and wormable hole in Symantec software.

He also noticed some vulnerabilities in certain Avast offerings, server-side pain in Malwarebytes, and a few failures in Comodo, Kasperksy and Bromium, to be specific.

But the question is, are that many people really using the lastpass service? We took a quick look and can see some obvious critical security issues.

Obviously, the security hole will need to be replayed by LastPass before patches are sent out.

There is no news yet of in-the-wild attacks. For what it's worth, Ormandy will soon set his sights on another password vault service called 1Password.

Source: Tavis Ormandy.

Sponsered ads:
Read the latest IT news. Visit ItDirection.net. Updated several times daily.

If you need reliability when it comes to SMTP servers, get the best, get Port 587.

Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!

Share on Twitter.


Home | Proxy Sentinel™ | Firewall Sentinel™ | FAQ | News | Sitemap | Contact
Copyright © Internet Security.ca    Terms of use    Privacy agreement    Legal disclaimer