Thursday, December 28, 2017

LastPass' 2FA Authenticator app found to be partially insecure, fix incoming

The vulnerability was actually pretty simple. Apparently, by merely launching the LastPass Authenticator settings activity (com.lastpass.authenticator.activities.SettingsActivity), you could enter the settings pane for the app without having to provide a PIN or fingerprint. From there, it's a single tap back to ...

from Google Alert - vulnerability http://ift.tt/2DrDsQO
via IFTTT

No comments:

Post a Comment