Major password manager suffers another security breach

Password manager LastPass announced Wednesday it had suffered its second data breach in three months. CEO Karim Toubba said the company recently detected unusual activity within a third-party cloud storage service that is shared by LastPass and GoTo. He said an investigation was immediately launched into the incident by security firm Mandiant and that law enforcement had been alerted. In August, LastPass said an unauthorized party had gained access to portions of the LastPass development environment through a single compromised developer account and took portions of source code and some proprietary LastPass technical information. LastPass is working to identify what specific information has been accessed and the scope of the incident. Products and services remain fully functional, and LastPass continues to deploy enhanced security measures and monitoring capabilities across its infrastructure. . . .