LastPass, an online service that keeps your passwords safe behind one master code, isn’t nearly as secure as it should be right now.
According to Google’s vulnerability researcher Tavis Ormandy, there’s at least one unpatched vulnerability in LastPass that would allows attackers to steal passwords “from any domain.”
Ormandy recently reported a few other LastPass bugs, including vulnerabilities in the LastPass add-ons for Firefox and Chrome.
