Password manager LastPass fixes security flaw
1:46

Password manager LastPass fixes security flaw

Tech Industry
A couple of big flaws in a password manager are now fixed. Security researcher Mathias Carlson found a flow in the password manager's LastPass. What he found was a bug that allowed him to get passwords due to LastPass's autofill function. When you use LastPass, you have an option for the extension to automatically fill out your credentials. Carlson found that LastPass would look at only part of a web address to determine whether to fill out forms. So, he tested it. Sure enough the top level URL did not determine whether LastPass would auto fill information. The password manager could be fooled if a URL included other language. In short, a LastPass user could have their information compromised. By visiting a malicious site if they weren't paying attention to the address bar. The researcher reported this to Last Pass and the issue was fixed in under a day. Last Pass says that all browser clients were updated and its users do not need to do anything to be protected. Carlson received a bug bounty of $1000 Many companies reward people for reporting bugs. For example, Google said it typically pays from $500 to $100,000 for certain bug reports related to its browser, Chrome. Speaking of Google, another bug was found by a Google security team researcher related to LastPass' Firefox addon. This flaw could allow remote control of a user's LastPass account. The company has already pushed a fix to users. If you use Firefox and you wanna check if you're updated, you can go to LastPass.com/lastpassffx. And a word of general advice, Pay attention to addresses in your browser. That's it for this tech news update, I'm Iya Zactar, and you can stay on top of the biggest stories at cnet.com/update. [MUSIC]

Up Next

Download Netflix shows to watch offline
ud113016.jpg

Up Next

Download Netflix shows to watch offline

Amazon's next Echo said to come with a screen
ud112916.jpg

Amazon's next Echo said to come with a screen

Curved iPhone 8? Apple said to be exploring OLED screens
ud112816.jpg

Curved iPhone 8? Apple said to be exploring OLED screens

Black Friday and other turkey traditions are evolving
ud1123162.jpg

Black Friday and other turkey traditions are evolving

Facebook drone accident under investigation
ud112216.jpg

Facebook drone accident under investigation

Facebook needs you to fight fake news
ud112116.jpg

Facebook needs you to fight fake news

Airbnb wants to be your travel agent
ud111816.jpg

Airbnb wants to be your travel agent

Wait, how fast can Qualcomm charge a phone?
ud111716.jpg

Wait, how fast can Qualcomm charge a phone?

Snapchat may be worth $30 billion with IPO filing
ud111616.jpg

Snapchat may be worth $30 billion with IPO filing

Tech Shows

The Apple Core
apple-core-w

The Apple Core

Alphabet City
alphabet-city-w

Alphabet City

CNET Top 5
cnet-top-5-w

CNET Top 5

The Daily Charge
dc-site-1color-logo.png

The Daily Charge

What the Future
what-the-future-w

What the Future

Tech Today
tech-today-w

Tech Today

Latest News All latest news

Best Budget Phone Plans in 2022 (and the Fine Print)
bestbudgetphoneplans-thumb4

Best Budget Phone Plans in 2022 (and the Fine Print)

Hands-On: The Aspire Camillien Electric Bike
camillien-sb-v2-00-01-34-17-still004.png

Hands-On: The Aspire Camillien Electric Bike

2022 Yamaha XSR900 Breaks Away From the Cafe, and Onto the 1980s GP Grid
yamaha-still

2022 Yamaha XSR900 Breaks Away From the Cafe, and Onto the 1980s GP Grid

We Test Snap's Pixy Selfie Drone
screenshot-2022-05-25-at-10-59-48.png

We Test Snap's Pixy Selfie Drone

Baby Formula Shortage Explained: What You Can Do
formula-shortage-1

Baby Formula Shortage Explained: What You Can Do

Meta's Next VR Headset: Should You Get a Quest 2 or Wait?
meta-questsitethumb1

Meta's Next VR Headset: Should You Get a Quest 2 or Wait?

Most Popular All most popular

Meta's Next VR Headset: Should You Get a Quest 2 or Wait?
meta-questsitethumb1

Meta's Next VR Headset: Should You Get a Quest 2 or Wait?

See the Navy Unveil New Video of UFOs/UAPs
uap-pic

See the Navy Unveil New Video of UFOs/UAPs

Hands-On: The Aspire Camillien Electric Bike
camillien-sb-v2-00-01-34-17-still004.png

Hands-On: The Aspire Camillien Electric Bike

We Test Snap's Pixy Selfie Drone
screenshot-2022-05-25-at-10-59-48.png

We Test Snap's Pixy Selfie Drone

How to cut the cord: 7 questions you need to answer
7-allfinished.png

How to cut the cord: 7 questions you need to answer

2022 Yamaha XSR900 Breaks Away From the Cafe, and Onto the 1980s GP Grid
yamaha-still

2022 Yamaha XSR900 Breaks Away From the Cafe, and Onto the 1980s GP Grid

Latest Products All latest products

Moto G 5G Review: A $400 Phone That May Have Everything You Need
clip0001-00-00-25-15-still001

Moto G 5G Review: A $400 Phone That May Have Everything You Need

Hands-On: We Got to Try the Sony Xperia 1 IV and Its Zoom Lens
xperiafinalpicsite

Hands-On: We Got to Try the Sony Xperia 1 IV and Its Zoom Lens

Lenovo Legion 7 Gaming Laptops Combine Great Power With Simple, Slim Designs
lenovolegion-00-00-45-13-still003

Lenovo Legion 7 Gaming Laptops Combine Great Power With Simple, Slim Designs

Exploring Meta Store: Facebook Parent Meta's First Physical Retail Space
metastore

Exploring Meta Store: Facebook Parent Meta's First Physical Retail Space

Lenovo's Torrent of Slim-Series Laptops Has Almost Too Many Options
lenovoslim-00-00-03-10-still001.png

Lenovo's Torrent of Slim-Series Laptops Has Almost Too Many Options

Disney's New Wristband Brings Games to Theme Parks
magic-band-plus-1-copy

Disney's New Wristband Brings Games to Theme Parks

Latest How To All how to videos

How to Buy a Budget Laptop in 2022
budgetlaptops-00-08-35-15-still001

How to Buy a Budget Laptop in 2022

Google Pay: How to Set Up and Use
googlepay-inhand

Google Pay: How to Set Up and Use

Clean Your AirPods and EarPods Without Damaging Them
yt-howto-clean-airpods-v3

Clean Your AirPods and EarPods Without Damaging Them

How to Control Your Computer With Your Feet
yt-learn-guitar-foot-controls-v2

How to Control Your Computer With Your Feet

How to Download YouTube Videos
yt-howto-download-yt-videos-v3

How to Download YouTube Videos

Find Forgotten Wi-Fi Passwords for Previously Used Networks
how-to-find-a-wi-fi-password-on-any-network-1

Find Forgotten Wi-Fi Passwords for Previously Used Networks