CriticalSecurity & Privacy
Security News This Week: LastPass Users Had Their Data Stolen—Again
LastPass experienced another significant data breach through a compromised third-party vendor (Klue), exposing customer contact information and supporting evidence that supply chain security vulnerabilities represent a critical risk to enterprise authentication infrastructure. This incident, combined with nation-state actors actively positioning within critical infrastructure globally and successful disruption of major infostealer malware networks, underscores the urgent need for IT leaders to strengthen vendor risk management, implement zero-trust access controls, and enhance threat detection capabilities across their entire technology ecosystem.

Plus: Former national security advisor John Bolton pleads guilty in classified-materials case, Microsoft helps take down major infostealer infrastructure, and more.