Conversation

I keep hearing from people about #LastPass accounts configured with one iteration. At the same time people point out that super admin accounts hold the keys to decrypting all of the users’ vaults. And that Federated Login doesn’t apply to super user accounts – these are still only protected by their master password.

Guess it’s only a matter of time until the attackers find a weakly protected super admin account and use that to compromise a company?

#LastPassBreach

https://palant.info/2022/12/28/lastpass-breach-the-significance-of-these-password-iterations/