Skip to content
NewA calmer, faster ZeroHour

LastPass Hack: Engineer's Failure to Update Plex Software Led to Massive Data Breach

The Hacker Newsby @TheHackersNews ()2 min read5 · 2 reads
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2020-5741
Authenticated Deserialization RCE in Plex Media Server on Windows
7.273%KEVPoC ×2
KEV

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Mar 07, 2023 Password Security / Software Update The massive breach at LastPass was the result of one of its engineers failing to update Plex on their home computer, in what's a sobering reminder of the dangers of failing to keep software up-to-date.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.