Password manager Dashlane disclosed that attackers compromised some customer accounts by brute-forcing its two-factor authentication system, gaining access to encrypted password vaults.
Dashlane, one of the largest password management services, confirmed hackers successfully bypassed its 2FA security layer through brute-force attacks. The breach allowed unauthorized access to customer accounts and the ability to download password vaults stored within the platform.
The company did not specify how many customers were affected or provide additional technical details about the attack method. Password managers store sensitive login credentials for users, making them high-value targets for cybercriminals.
The incident raises questions about the effectiveness of Dashlane's two-factor authentication implementation. Users relying on the service for credential storage face potential exposure if their master passwords were weak or previously compromised on other platforms.
Dashlane has not yet announced specific remediation steps or whether customer notifications are underway. The breach underscores ongoing security challenges even among dedicated password management providers.
A new remote access trojan called Dolphin X leverages AI to profile and score infected users, enabling cybercriminals to prioritize high-value victims for exploitation.
A race condition vulnerability in the Linux kernel's XFS filesystem allows local attackers to overwrite protected files and gain root privileges. The flaw, tracked as CVE-2026-64600, has remained unpatched for nine years.
Intensified enforcement against online scam operations in Cambodia is displacing criminal networks to Sri Lanka, where authorities have arrested over 1,000 people in 2026.
Offensive cybersecurity researchers report that safety guardrails from OpenAI and Anthropic are restricting their ability to find vulnerabilities and develop security tools. The limitations are creating friction for legitimate security work.