Connect with us

News

Password manager Dashlane says hackers stole some customers’ password vaults

info

Published

on

Password.jpg

Password manager maker Dashlane says hackers have obtained at least a dozen encrypted vaults used for storing customer passwords during a weekend cyberattack.

The company said on its website that hackers brute-forced the company’s two-factor authentication system, granting the hackers access to about 20 customer accounts. By defeating its two-factor mechanism, the hackers were able to download a copy of certain customers’ encrypted vaults, which store their passwords and other sensitive credentials.

Dashlane said on its incident page that there was no evidence of compromise of its own systems, but it has not yet said how the hackers were able to defeat its two-factor protections in order to access customer accounts. Two-factor is a security feature that protects accounts from being accessed with just a stolen username and password, typically by requiring an additional passcode to be sent to the phone of the account holder.

“The goal of the attack was to brute-force two-factor authentication (2FA) protections to allow the attacker to register new devices on existing user accounts,” said Dashlane. The company said that attackers can use automated software to “rapidly submit every possible numeric combination to the system, hoping to guess the exact sequence before the short-lived [two-factor] security code expires.”

The company said it has “taken steps to mitigate the risk of future incidents,” without saying what those were.

Dashlane said it has notified the 20 or so customers whose encrypted vaults were stolen. It’s not yet clear if the specific customers were targeted for a reason, such as because of who they are or what they do for a living.

Spokespeople for Dashlane did not respond to a request for comment. The company has not said if it knows who targeted its customers, or if the hackers contacted Dashlane with demands, such as a ransom.

The stolen vaults are scrambled and cannot be read without the customer’s master password, which is only known by the customer and is not uploaded to Dashlane in plaintext, the company’s website says. But Dashlane said that customers with an easily guessed master password may be at greater risk of having it guessed and their password vaults decrypted.

Data breaches affecting password manager companies are rare, but can have lasting consequences.

In 2022, LastPass confirmed that customer password vault backups were stolen during a cyberattack. While the vaults were protected with passwords only known to the customer, the password requirements for early customers were far weaker than the later standard, allowing hackers to brute-force and easily guess the passwords of some customers’ vaults. There have been several reports of hackers stealing vast amounts of customers’ crypto, likely by using private keys stored in stolen LastPass vaults that had their master passwords cracked following the breach.

A year earlier, Australian software house Click Studios warned all of its customers who use its flagship password manager, Passwordstate, to “reset all credentials” after hackers compromised its software update mechanism to plant malware on customer systems.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

2027: Elections must never be treated as do-or-die affairs – INEC Chair, Amupitan appeals to Emir of Zazzau

info

Published

on

Joash Amupitan 1.jpg

The Chairman of the Independent National Electoral Commission, INEC, Prof. Joash Amupitan, SAN, has appealed to the Emir of Zazzau, Amb. Ahmed Nuhu Bamalli, CFR, to use his exalted platform to counsel political parties, candidates and their supporters on the imperative of non-violent, issue-based campaigns ahead of the 2027 general elections.

The INEC chairman made the appeal on Sunday during a courtesy visit to the Emir’s palace in Zaria, Kaduna State, as part of the Commission’s nationwide Zonal Readiness Assessment and Interactive Staff Engagement for the 2027 general elections.

“Elections must never be treated as do-or-die affairs, but as a peaceful celebration of civic choice,” Prof. Amupitan said, urging the monarch to “strongly counsel our youth not to allow themselves to be used as tools in the hands of politicians or instruments of political violence and thuggery.”

He further called on the Emir to encourage the people of Zazzau Emirate to actively participate in all stages of the electoral process, from the collection of Permanent Voters’ Cards (PVCs) to turning out peacefully to vote on election days, stating that “a vibrant democracy requires an engaged, informed, and participating electorate.”

Recommended

Amupitan explained that the visit was part of the Commission’s established tradition of deep engagement with traditional rulers, recalling similar consultations with the Ewi of Ado-Ekiti during the Ekiti governorship election, more than 50 Osun monarchs, including the Ooni of Ife and the Ataoja of Osogbo, ahead of the Osun governorship election, and the Oba of Lagos and the White Cap Chiefs during the Commission’s South-West Zonal Assessment tour.

He noted that conducting a national election in “Africa’s largest democracy,” with a national voter register rapidly approaching the 100 million mark, required early planning, operational discipline and deep stakeholder engagement.

He added that the Commission had moved away from last-minute logistics in favour of testing, auditing and strengthening its operational readiness well ahead of time.

He disclosed that the Commission had fixed the statutory dates for the 2027 general elections, with the Presidential and National Assembly elections scheduled for Saturday, January 16, 2027, and the governorship and State Houses of Assembly elections scheduled for Saturday, February 6, 2027.

He stressed that all administrative, technological and logistical frameworks were being fortified across the 36 states and the Federal Capital Territory.

The INEC chairman assured the Emirate that under his leadership, “INEC remains unreservedly committed to absolute neutrality, fairness, and transparency,” stating that the Commission had “no candidate, no political party, and no interest other than the sovereign will of the Nigerian people.”

Responding, the Emir of Zazzau, Amb. Ahmed Nuhu Bamalli, commended the INEC chairman for leading the Commission’s delegation to the palace and for providing timely information on preparations for the 2027 general elections.

The Emir described the engagement as remarkable and important, noting that the visit had helped the Emirate and its people gain a clearer understanding of the Commission’s preparations and the election calendar.

He identified fairness, justice, a level playing field, security, timely dissemination of information and the prompt release of results as critical elements for a successful electoral process.

The Emir also urged INEC to address concerns arising from previous elections, particularly the late distribution of sensitive and non-sensitive materials and technical challenges associated with election technology.

He called for election equipment to be adequately tested before deployment and for election officials and materials to arrive at polling units on time, saying such measures would strengthen public confidence in the electoral process.

The Emir further appealed to political parties and their supporters to conduct themselves responsibly during the campaign period and minimise hate speech and other actions capable of threatening peace and national cohesion.

He expressed optimism that Nigeria would continue to remain united and sustain democratic governance.

The INEC chairman and his entourage are in Kaduna in continuation of the nationwide readiness assessment and are expected to meet with staff from the North-West states on Monday, September 28, 2026.

Continue Reading

News

Okpebholo should resign over UK fuel price comparison – APM

info

Published

on

APM.jpg

The Allied Peoples Movement (APM) has called on Edo State Governor, Senator Monday Okpebholo, to resign over his comparison of petrol prices in Nigeria and the United Kingdom.

The party said the governor’s comparison failed to take into account the wide difference in income and purchasing power between Nigerians and people living in the UK.

In a statement by its National Publicity Secretary, Abubakar Yusuf, the APM also criticised the increase in petrol prices to more than N1,500 per litre, saying Nigerians were expecting a reduction in the cost of fuel.

Yusuf said the APM condemned the sharp rise in petrol prices to more than N1,500 per litre, stressing that Nigerians were expecting the price to come down.

Recommended

“It is unfair to compare petrol prices in Nigeria with those in the UK without taking into account the difference in workers’ incomes. Nigeria’s N70,000 minimum wage is far below what workers earn on average in the UK,” the party said.

The APM used teachers to illustrate the difference, saying Nigerian teachers earn about N70,000 or less, while a teacher in the UK starts with a monthly salary of about £2,839.

The party also argued that the two countries have different transport systems. It said Nigerians largely depend on informal and costly transportation, while the UK has a more structured and regulated public transport system supported by government subsidies.

The APM further pointed to other oil-producing countries, including Libya and Iran, where it said petrol is sold at much lower prices.

“What Governor Okpebholo failed to tell Nigerians is the fact that in other oil producing countries such as Libya and even Iran, which is presently at war, petrol is sold at an average of equivalent of N41 to N52 per litre,” the party said.

The party described the governor’s comparison between Nigeria and the UK as provocative, arguing that it could further increase public anger over the rising cost of living.

“It is therefore completely irrational and highly provocative for APC Governor Okpebholo to attempt to compare the situation in the UK to that of Nigeria,” the APM said.

The party also expressed concern that the governor’s comments could be seen as preparing Nigerians for another increase in petrol prices, although it did not provide evidence that such an increase was being planned by the government.

The APM also called on Nigerians to support its presidential candidate, Oyo State Governor Seyi Makinde, in the 2027 election.

Continue Reading

Trending