Critical vulnerabilities found in the Chrome and Firefox extensions of the LastPass password manager can be exploited to steal passwords, warned Google Project Zero researcher Tavis Ormandy.
The expert has discovered several flaws, but only one of them appears to have been patched by LastPass developers.
Article Link: http://feedproxy.google.com/~r/Securityweek/~3/Igll1KVQCho/lastpass-flaws-allow-hackers-steal-passwords