#dashlane — Public Fediverse posts

Dashlane potwierdza atak brute force, jednak dane użytkowników nie są zagrożone

31 maja 2026 do Dashlane wpłynęły zgłoszenia kilku użytkowników, którzy otrzymali e-mail informujący, że ich konto zostało zawieszone. Użytkownicy zgłaszali również problemy z logowaniem do usługi po zresetowaniu hasła (Master Password). TLDR: Zespół Dashlane ustalił, że przyczyną był atak brute force na wybrane konta użytkowników usługi. Celem ataku było pokonanie...

#WBiegu #2Fa #Atak #Awareness #Bezpieczeństwo #BruteForce #Dashlane #Hasła

https://sekurak.pl/dashlane-potwierdza-atak-brute-force-jednak-dane-uzytkownikow-nie-sa-zagrozone/

Dashlane potwierdza atak brute force, jednak dane użytkowników nie są zagrożone

31 maja 2026 do Dashlane wpłynęły zgłoszenia kilku użytkowników, którzy otrzymali e-mail informujący, że ich konto zostało zawieszone. Użytkownicy zgłaszali również problemy z logowaniem do usługi po zresetowaniu hasła (Master Password). TLDR: Zespół Dashlane ustalił, że przyczyną był atak brute force na wybrane konta użytkowników usługi. Celem ataku było pokonanie...

#WBiegu #2Fa #Atak #Awareness #Bezpieczeństwo #BruteForce #Dashlane #Hasła

https://sekurak.pl/dashlane-potwierdza-atak-brute-force-jednak-dane-uzytkownikow-nie-sa-zagrozone/

Apres le gestionnaire de mot de passe #bitwarden qii a été compromis a l'hiver dernier, voici maintenant #dashlane qui a subit une faille de sécurité 👀

Ne faites PAS confiance au #cloud pour vos mots de passe 😫

Utilisez seulement #KeepassDX et #KeepassXC

C'est en local, c pas beau mais c fiable🤷‍♀️

Apres le gestionnaire de mot de passe #bitwarden qii a été compromis a l'hiver dernier, voici maintenant #dashlane qui a subit une faille de sécurité 👀

Ne faites PAS confiance au #cloud pour vos mots de passe 😫

Utilisez seulement #KeepassDX et #KeepassXC

C'est en local, c pas beau mais c fiable🤷‍♀️

#Dashlane explains how attackers managed to download encrypted #password vaults

https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/

#cybersecurity #PasswordManager #DataBreach

#Dashlane explains how attackers managed to download encrypted #password vaults

https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/

#cybersecurity #PasswordManager #DataBreach

#Dashlane explains how attackers managed to download #encrypted #password vaults
#privacy #security

https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/

#Dashlane explains how attackers managed to download #encrypted #password vaults
#privacy #security

https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/

Can’t make sense of #Dashlane’s vault theft notification? You’re not alone.

https://arstechnica.com/security/2026/06/dashlane-issues-opaque-advisory-warning-20-encrypted-vaults-were-stolen/

#PasswordManager #cybersecurity #DataBreach

Can’t make sense of #Dashlane’s vault theft notification? You’re not alone.

https://arstechnica.com/security/2026/06/dashlane-issues-opaque-advisory-warning-20-encrypted-vaults-were-stolen/

#PasswordManager #cybersecurity #DataBreach

Dashlane a été piraté : êtes vous concernés ?
https://mac4ever.com/196543
#Mac4Ever #dashlane #passwords

Dashlane a été piraté : êtes vous concernés ?
https://mac4ever.com/196543
#Mac4Ever #dashlane #passwords

#Dashlane explains how attackers managed to download encrypted password vaults

https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/

#Dashlane explains how attackers managed to download encrypted password vaults

https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/

#Dashlane is being cagey about what exactly was wrong with their automated defenses which enabled attackers to brute-force like 20 users' vaults.
Here's my explanation of what I think happened:
https://federate.social/@jik/116694985659498974
#infosec #breach

#Dashlane is being cagey about what exactly was wrong with their automated defenses which enabled attackers to brute-force like 20 users' vaults.
Here's my explanation of what I think happened:
https://federate.social/@jik/116694985659498974
#infosec #breach

Incredible how companies keep screwing up communication with their customers when experiencing critical breaches, destroying all trust in the process. They never learn. They are following in the footsteps of the #Lastpass fiasco.

#Dashlane #CyberSecurity

https://arstechnica.com/security/2026/06/dashlane-issues-opaque-advisory-warning-20-encrypted-vaults-were-stolen/

Incredible how companies keep screwing up communication with their customers when experiencing critical breaches, destroying all trust in the process. They never learn. They are following in the footsteps of the #Lastpass fiasco.

#Dashlane #CyberSecurity

https://arstechnica.com/security/2026/06/dashlane-issues-opaque-advisory-warning-20-encrypted-vaults-were-stolen/

PASSWORD MANAGER DASHILANE SUSPENDS ACCOUNTS AMID ATTACKS

Why did Dashlane freeze user accounts on January 6 2026? Learn how brute-force attacks are affecting password manager users and what you should do next.

#dashlane, #cybersecurity, #passwordmanager, #accountsecurity, #techupdate

https://newsletter.tf/dashlane-suspends-accounts-january-2026/

Dashlane has locked some accounts today to stop hackers from guessing passwords. This is a new security step compared to their normal service.

#dashlane, #cybersecurity, #passwordmanager, #accountsecurity, #techupdate
https://newsletter.tf/dashlane-suspends-accounts-january-2026/

تعرضت شركة Dashlane المتخصصة في إدارة كلمات المرور لهجوم سيبراني استهدف ميزة المصادقة الثنائية في نهاية مايو 2026. نجح المهاجمون في الوصول إلى خزائن مشفرة لعدد محدود جداً من المستخدمين، بينما قامت أنظمة الحماية التلقائية بحظر الهجوم وتأمين بقية الحسابات. أكدت الشركة سلامة أنظمتها الداخلية وقامت باستعادة الوصول لكافة الحسابات المتضررة، مع تعزيز تدابيرها الأمنية لمنع تكرار مثل هذه الحوادث مستقبلاً، مما يضمن استمرارية حماية بيانات المستخدمين وخصوصيتهم الرقمية بشكل فعال.

#Dashlane #CyberSecurity

Dashlane victime d’une cyberattaque, une vingtaine de coffres-forts chiffrés dérobés http://dlvr.it/TSsBF1 #Dashlane #cyberattaque

Dashlane victime d’une cyberattaque, une vingtaine de coffres-forts chiffrés dérobés http://dlvr.it/TSsBF1 #Dashlane #cyberattaque

🔐 Dashlane: vault cifrati rubati dagli hacker. La cifratura è una barriera, non un alibi: password master robuste e 2FA restano essenziali. #Cybersecurity #Dashlane

🔗 https://www.tomshw.it/hardware/dashlane-hacker-vault-cifrati

Ataque de força bruta ao Dashlane expõe cofres de vários utilizadores
🔗 https://tugatech.com.pt/t84764-ataque-de-forca-bruta-ao-dashlane-expoe-cofres-de-varios-utilizadores

#ataque #dashlane 

Ataque de força bruta ao Dashlane expõe cofres de vários utilizadores
🔗 https://tugatech.com.pt/t84764-ataque-de-forca-bruta-ao-dashlane-expoe-cofres-de-varios-utilizadores

#ataque #dashlane 

RE: https://mastodon.social/@zackwhittaker/116681287447050780

There are two lessons here, one for #Dashlane and one for everybody else.
Dashlane: Code-based 2FA mechanisms obviously need brute-force protections. Bro, how did you screw this up?
Everybody else: Use strong 2FA (e.g., security keys or passkeys) wherever you can.
(But make sure you have backup login methods configured for when you inevitably lose the keys.)
(But make sure the backup login methods aren't vulnerable to brute-force attacks.)
(Otherwise you're back in Dashlane territory.)
#infosec

RE: https://mastodon.social/@zackwhittaker/116681287447050780

There are two lessons here, one for #Dashlane and one for everybody else.
Dashlane: Code-based 2FA mechanisms obviously need brute-force protections. Bro, how did you screw this up?
Everybody else: Use strong 2FA (e.g., security keys or passkeys) wherever you can.
(But make sure you have backup login methods configured for when you inevitably lose the keys.)
(But make sure the backup login methods aren't vulnerable to brute-force attacks.)
(Otherwise you're back in Dashlane territory.)
#infosec

Angriff auf Dashlane-Tresore: So steht es um deine Passwörter

https://techupdate.io/sicherheit/angriff-auf-dashlane-tresore-so-steht-es-um-deine-passwoerter/51223/

#technews #cybersecurity #datenschutz #passwortmanager #dashlane

Oh my, #Dashlane!

https://techcrunch.com/2026/06/02/password-manager-dashlane-says-hackers-stole-some-customers-password-vaults/

#Cybersecurity

Oh my, #Dashlane!

https://techcrunch.com/2026/06/02/password-manager-dashlane-says-hackers-stole-some-customers-password-vaults/

#Cybersecurity

#Dashlane #PasswordManager users locked out by brute force attacks

https://www.bleepingcomputer.com/news/security/dashlane-password-manager-users-locked-out-by-brute-force-attacks/

#cybersecurity

#Dashlane #PasswordManager users locked out by brute force attacks

https://www.bleepingcomputer.com/news/security/dashlane-password-manager-users-locked-out-by-brute-force-attacks/

#cybersecurity

Not sure I trust this to be the full story. I remember the LastPass hack a few years ago. #dashlane #hacking #cybersecurity #infosec https://thehackernews.com/2026/06/dashlane-discloses-brute-force-attack.html?m=1

Dashlane Bolsters Defenses After Brute Force Attacks Lock Out Users

Dashlane recently thwarted a brute force attack that temporarily locked out some users, but swift action ensured their accounts were quickly restored. The company has since bolstered its defenses and is closely monitoring the situation to prevent future incidents.

https://osintsights.com/dashlane-bolsters-defenses-after-brute-force-attacks-lock-out-users?utm_source=mastodon&utm_medium=social

#BruteForceAttacks #PasswordManagement #EmergingThreats #Dashlane

This looks ominous. The password manager service Dashlane apparently is investigating some strange "Account suspended -- please contact us" emails going out, as well as related login difficulties.

I noticed this after a reader and Dashlane user wrote in to say he's on a family plan and he received a notification that they'd locked his account because there was an attempt to add a device and too many MFA failures. Here's what their techs are telling customers:

"Thank you for reaching out to us! It's Gustavo from Dashlane Customer Support. I am very sorry for any inconvenience this issue has caused.

We are currently investigating an issue regarding unexpected emails with the subject "Account suspended - please contact us", as well as some related login difficulties.

Our engineering team is actively working on a resolution. While we investigate, please follow these important recommendations to ensure you retain access to your data:

- Do not attempt to change or reset your Master Password at this time.
- Do not log out of Dashlane on any device where you are currently logged in.

We are treating this with the highest priority and will update you as soon as we have more information or a definitive fix.

Thank you for your patience and understanding while we sort this out."

Their account status page now says:

May 31, 2026 17:50 UTC
INVESTIGATING

We are continuing to investigate the "Account suspended" notifications. Our engineering teams are actively working on a resolution and investigating the root cause of these messages.

We are treating this with the highest priority and will provide further updates here as soon as more information becomes available. Thank you for your continued patience and understanding.

May 31, 2026 15:19 UTC
INVESTIGATING

We have received reports from several users having received an email that their account has been suspended. We have also received reports that some users are experiencing difficulties in logging in to Dashlane after resetting their master password.

We are investigating this situation, and we will provide further updates as soon as we have more information. Thank you for your understanding.

#dashlane

this concludes my reading of https://eprint.iacr.org/2026/058

what a paper. warmly recommended to read.

#crypto #passwordmanagers #bitwarden #lastpass #dashlane

14/n

Password managers don’t protect secrets if pwned. You probably can't trust your password manager if it's compromised.
.

#bitwarden #cryptography #dashlane #encryption #lastpass #password

https://www.theregister.com/2026/02/16/password_managers/

[en] Serious security vulnerabilities in cloud-based password managers : #Bitwarden, #Lastpass, #Dashlane

The research team of Prof. Paterson found cryptographic technologies from the 90s. "We were surprised by the severity of the security vulnerabilities".

In most cases, the researchers were able to gain access to the passwords – and even make changes to them.

https://ethz.ch/en/news-and-events/eth-news/news/2026/02/password-managers-less-secure-than-promised.html

Aside from this research paper, recommended password managers often include #KeePassXC and/or #KeePassDX for Android or #KeePassium for iOS. Also, it's usually a good idea to store only accounts and passwords that are really necessary on the go, especially on mobile devices.

#password #passwordmanager #cloudbased #security #ictsecurity #securityvulnerability #ethz

[de] Cloudbasierte Passwortmanager mit gravierenden Sicherheitslücken: #Bitwarden, #Lastpass, #Dashlane

Vernichtende Feststellung: "kryptographische Technologien aus den 90er-Jahren". Dem Team um Prof. Paterson war es offenbar recht einfach möglich, "Zugang zu den Passwörtern verschaffen – und diese sogar [zu] manipulieren".

https://ethz.ch/de/news-und-veranstaltungen/eth-news/news/2026/02/passwortmanager-bieten-weniger-schutz-als-versprochen.html

Ausserhalb dieses Berichts wird u. a. oft #KeePassXC und/oder #KeePassDX für Android oder #KeePassium für iOS empfohlen mit der zusätzlichen Empfehlung, gerade auf mobilen Geräten nur diejenigen Konti/Passwörter zu speichern, die unterwegs wirklich dabei sein müssen.

#passwort #passwortmanager #cloudbasiert #sicherheit #ictsicherheit #sicherheitsluecken #ethz

@_DigitalWriter_ @chfkch @wrzlbrmpft Wenn wir von #E2E-Verschlüsselung sprechen, dann hat das nicht nur mit einer DB zu tun.

E2E beginnt beim Client & endet beim Client. Das betrifft also alles(!) dazwischen: Übertragung, Verarbeitung, Speicherung, ...

Insofern ein realistisches Angriffsszenario, gerade wenn es um Passwörter geht. Was ist denn noch sensibler als das?

Wir kennen auch die diverse Gesetzgebung, wo Betreiber von (US-)Services gezwungen werden, gegen die Interessen der Kund:innen zu agieren:
https://www.kuketz-blog.de/jenseits-der-grenzen-ueberblick-ueber-das-us-geheimdienstrecht/

Und dort werden dann die weltbesten staatlichen Hacker aktiv. Mit allen denkbaren technischen Mitteln.

Insofern: wer tatsächlich #Passwörter in eine #Cloud schickt (IMO wegen der Alternativen eine unnötig dumme Idee aber OK), der soll dann auch von einer funktionierenden E2E-Verschlüsselung ausgehen dürfen.

Alles andere ist sich ins die Tasche lügen. 🤷

Ad Cloud: https://karl-voit.at/cloud/

#Lastpass #1Pass #Bitwarden #Dashlane #Passwort #Passwortmanager

This is a great paper on the risks of malicious servers when using password managers: https://zkae.io/. I understood about 2% of it.

You have to dig down in the paper to see that there was pretty good engagement from the password manager developers, once contact was established. That's encouraging, particularly in the light of recent reputational damage suffered by LastPass, and doubts about its future under private equity ownership.

#crypto #passwordmanager #lastpass #dashlane #bitwarden #1password

Here's an english link. https://www.swissinfo.ch/eng/various/researchers-find-major-security-gaps-in-password-managers/90951851 #1password

#enpass
#Bitwarden
#lastpass
#dashlane
#itsecurity
#datasafety
#passwordmanager
#unsafe

Here's an english link. https://www.swissinfo.ch/eng/various/researchers-find-major-security-gaps-in-password-managers/90951851 #1password

#enpass
#Bitwarden
#lastpass
#dashlane
#itsecurity
#datasafety
#passwordmanager
#unsafe

Here's an english link. https://www.swissinfo.ch/eng/various/researchers-find-major-security-gaps-in-password-managers/90951851 #1password

#enpass
#Bitwarden
#lastpass
#dashlane
#itsecurity
#datasafety
#passwordmanager
#unsafe

Here's an english link. https://www.swissinfo.ch/eng/various/researchers-find-major-security-gaps-in-password-managers/90951851 #1password

#enpass
#Bitwarden
#lastpass
#dashlane
#itsecurity
#datasafety
#passwordmanager
#unsafe

Here's an english link. https://www.swissinfo.ch/eng/various/researchers-find-major-security-gaps-in-password-managers/90951851 #1password

#enpass
#Bitwarden
#lastpass
#dashlane
#itsecurity
#datasafety
#passwordmanager
#unsafe

This is, why I hate it when I am forced to "share" the keys to my castles via the cloud of password-managers like 1Password. Most local (WiFi) sync suck, or simply are dysfunctional (yes, 1Password, looking at you!). You have to trust them to encrypt the vaults adequately, which in three cases has ben shown not to be safe at all. https://ethz.ch/de/news-und-veranstaltungen/eth-news/news/2026/02/passwortmanager-bieten-weniger-schutz-als-versprochen.html #1password #enpass #Bitwarden #lastpass #dashlane #itsecurity #datasafety #passwordmanager #unsafe

This is, why I hate it when I am forced to "share" the keys to my castles via the cloud of password-managers like 1Password. Most local (WiFi) sync suck, or simply are dysfunctional (yes, 1Password, looking at you!). You have to trust them to encrypt the vaults adequately, which in three cases has ben shown not to be safe at all. https://ethz.ch/de/news-und-veranstaltungen/eth-news/news/2026/02/passwortmanager-bieten-weniger-schutz-als-versprochen.html #1password #enpass #Bitwarden #lastpass #dashlane #itsecurity #datasafety #passwordmanager #unsafe

This is, why I hate it when I am forced to "share" the keys to my castles via the cloud of password-managers like 1Password. Most local (WiFi) sync suck, or simply are dysfunctional (yes, 1Password, looking at you!). You have to trust them to encrypt the vaults adequately, which in three cases has ben shown not to be safe at all. https://ethz.ch/de/news-und-veranstaltungen/eth-news/news/2026/02/passwortmanager-bieten-weniger-schutz-als-versprochen.html #1password #enpass #Bitwarden #lastpass #dashlane #itsecurity #datasafety #passwordmanager #unsafe