LastPass informs its users that they need to change the master password for the service if they used bookmarklets before September 2013.The reason is that they have been notified by a security researcher of a vulnerability regarding this feature, which could be leveraged against a user utilizing the bookmarklet on an attacking site.The flaw was discovered by Zhiwei Li at UC Berkeley and there are no technical details about how the attack could be carried out.However, LastPass addressed this is…
Comments are closed.
