Meta AI Strategy Faces Challenges as Zuckerberg Admits Mistakes in Internal Memo 
Hanmi Semicon Shares Surge After $33 Million SpaceX Investment 
Apple Signals Product Price Hikes Amid Rising Memory Chip Costs 
SK Hynix Shares Hit Record High After Shipping Next-Generation HBM4E AI Memory Samples 
SoftBank Vision Fund CFO Navneet Govil to Exit After Decade-Long Tenure 
Microsoft Taps AWS to Support GitHub Amid AI Coding Boom 
Meta Seeks Legal Shield From Child-Harm Lawsuits Amid KOSA Talks 
SpaceX Stock Slides After IPO Rally as Valuation Concerns Grow 
UK Banks Report Surge in APP Fraud Losses as Pressure Mounts on Meta and Tech Platforms 
Trump Administration Delays DeepSeek and CXMT Trade Blacklist Designations Amid U.S.-China Tensions 
ByteDance Eyes Iluvatar, Baidu AI Chips Amid China’s AI Push 
Kingboard Holdings Shares Surge After HK$11.77 Billion Block Trade to Expand PCB and AI Supply Chain Business 
OpenAI's $34B Spending Pushes AI Market Leadership Ahead of IPO 
US Raises Concerns Over Possible ASML EUV Machine Transfer to China 
Elon Musk Becomes World's First Trillionaire After SpaceX IPO Surge 
LastPass is one of the most crucial internet services in the market right now because it serves a critical purpose: saving passwords that no one can be bothered to remember. Due to the nature of its services, LastPass takes its security very seriously. The tech entity managed to head off what would have been a security disaster by addressing two serious vulnerabilities. This would have put LogMeIn’s $110 million investment in the service in 2015 in a much darker light.
Before LastPass users panic, the company is assuring everyone that no hackers managed to find these vulnerabilities in time to actually take advantage of them, PC Mag reports. If they had, it would have compromised users of Chrome and Edge, as well as users of older versions of Mozilla Firefox.
The vulnerabilities themselves are tied to the browser extensions that are used for the ones mentioned above. They were discovered by Tavis Ormandy, a Google researcher earlier this March and notified LastPass, which gave the company enough time to actually patch it up.
LastPass provided more details regarding the vulnerabilities that it fixed in a blog post. The piece is relatively long, but the gist of it is that the holes have been filled, mobile versions of the services were not affected, and none of the credentials were stolen.
“To exploit the reported vulnerabilities, an attacker would first lure a user to a malicious website,” LastPass explained in the post if hackers had actually got wind of the vulnerability. “Once on a malicious website, Tavis demonstrated how an attacker could make calls into LastPass APIs, or in some cases run arbitrary code, while appearing as a trusted party. Doing so would allow the attacker to potentially retrieve and expose information from the LastPass account, such as user’s login credentials.”
LastPass was acquired by LogMeIn in 2015 in a bid to move into the cyber security space. If the password storage service had failed to fix the two vulnerabilities, the ensuing debacle would have made the hefty price tag paid at the time even heavier.
