Fortinet and Ivanti Ship Emergency Patches for Critical Command Injection Bugs
Both Fortinet and Ivanti have released urgent updates addressing critical OS command injection vulnerabilities that can be exploited remotely, without…
brute-force
Dashlane Brute-Force Attack Downloads Encrypted Vaults From Under 20 Users
Dashlane disclosed that attackers brute-forced 2FA protections and downloaded encrypted vaults from fewer than 20 personal plan users. The vaults are encrypted, but users with weak master passwords should change them immediately.
Dashlane Password Manager Hit by Brute-Force Attack — Fewer Than 20 Vaults Downloaded
Password manager Dashlane disclosed that fewer than 20 encrypted vaults were downloaded after a brute-force attack targeting 2FA protections. The vaults are encrypted, but the incident raises questions about how the attackers bypassed two-factor authentication.
Dashlane Brute-Force Attack: What Actually Happened
Password manager Dashlane disclosed that a brute-force attack targeting its device registration system compromised fewer than 20 user accounts. Here’s what actually happened and what it means for you.