Security News
![LastPass Free vs. Premium: Which Plan Is Right for You?](/static/build/img/news/lastpass-free-vs-premium-which-plan-is-right-for-you-small.jpg)
Read on to compare LastPass Free and Premium plan features. Both the LastPass Free and Premium plans allow you to generate, save and autofill an unlimited number of passwords across websites and online applications in the LastPass Vault.
![Ivanti: Patch new Connect Secure auth bypass bug immediately](/static/build/img/news/ivanti-patch-new-connect-secure-auth-bypass-bug-immediately-small.jpg)
Today, Ivanti warned of a new authentication bypass vulnerability impacting Connect Secure, Policy Secure, and ZTA gateways, urging admins to secure their appliances immediately. Shadowserver also monitors Ivanti Connect Secure VPN instances compromised worldwide daily, with almost 250 compromised devices discovered on Wednesday, February 7.
![Microsoft unveils new 'Sudo for Windows' feature in Windows 11](/static/build/img/news/microsoft-unveils-new-sudo-for-windows-feature-in-windows-11-small.jpg)
Microsoft introduced 'Sudo for Windows' today, a new Windows 11 feature allowing users to execute commands with elevated privileges from unelevated terminals. "Sudo for Windows is a new way for users to run elevated commands directly from an unelevated console session," said Windows Product Manager Jordi Adoumie.
![Android XLoader malware can now auto-execute after installation](/static/build/img/news/android-xloader-malware-can-now-auto-execute-after-installation-small.jpg)
A new version of the XLoader Android malware was discovered that automatically executes on devices it infects, requiring no user interaction to launch. XLoader, aka MoqHao, is an Android malware operated and likely created by a financially motivated threat actor named 'Roaming Mantis,' previously seen targeting users in the U.S., U.K., Germany, France, Japan, South Korea, and Taiwan.
![US offers $10 million for tips on Hive ransomware leadership](/static/build/img/news/us-offers-10-million-for-tips-on-hive-ransomware-leadership-small.jpg)
The U.S. State Department offers rewards of up to $10 million for information that could help locate, identify, or arrest members of the Hive ransomware gang. "Today, the Department of State is announcing a reward offer of up to $10,000,000 for information leading to the identification and/or location of any individual(s) who hold a key leadership position in the Hive ransomware variant transnational organized crime group," the State Department said.
![Raspberry Robin devs are buying exploits for faster attacks](/static/build/img/news/raspberry-robin-devs-are-buying-exploits-for-faster-attacks-small.jpg)
Researchers suspect the criminals behind the Raspberry Robin malware are now buying exploits for speedier cyberattacks. An exploit developer is thought by infosec pros to be either on the Raspberry Robin payroll or a close contact that sells them to the group - most likely the latter.
![Fake LastPass password manager spotted on Apple’s App Store](/static/build/img/news/fake-lastpass-password-manager-spotted-on-apples-app-store-small.jpg)
LastPass is warning that a fake copy of its app is being distributed on the Apple App Store, likely used as a phishing app to steal users' credentials. As LastPass is used to store very sensitive information, such as authentication secrets and credentials, the app was likely created to act as a phishing app and steal credentials.
![Data breaches at Viamedis and Almerys impact 33 million in France](/static/build/img/news/data-breaches-at-viamedis-and-almerys-impact-33-million-in-france-small.jpg)
Data breaches at two French healthcare payment service providers, Viamedis and Almerys, have now been determined to impact over 33 million people in the country.The data protection authority in France has now confirmed both data breaches and says that the attacks impacted 33 million people in the country.
![LassPass is not LastPass: Fraudulent app on Apple App Store](/static/build/img/news/lasspass-is-not-lastpass-fraudulent-app-on-apple-app-store-small.jpg)
A fraudulent app named "LassPass Password Manager" that mimics the legitimate LastPass mobile app can currently be found on Apple's App Store, the password manager maker is warning. "The app in question is called 'LassPass Password Manager' and lists Parvati Patel as the developer. The app attempts to copy our branding and user interface, though close examination of the posted screenshots reveal misspellings and other indicators the app is fraudulent," says Mike Kosak, Senior Principal Intelligence Analyst at LastPass.
![Cybercrime duo accused of picking $2.5M from Apple's orchard](/static/build/img/news/cybercrime-duo-accused-of-picking-2-5m-from-apple-s-orchard-small.jpg)
While Apple isn't explicitly named in the recently unsealed court papers, it's not difficult to deduce that the identity of "Company A," as written in the indictment, is the consumer tech megacorp. Looking deeper into the case background, it's also revealed that one of the defendants redeemed one of the stolen gift cards to their personal app store account, where they purchased Final Cut Pro - software developed by Apple that only runs on Apple hardware.