password manager security

KeePass Plaintext Export ‘Flaw’: The Trust-Boundary Debate

Post author:Prabhu Kalyan Samal
Post published:January 13, 2023
Post category:Cryptography & PKI Identity & Phishing Security

CVE-2023-24055 showed a config-planted trigger could export KeePass vaults in plaintext after unlock. The debate: feature, flaw, or threat model?

LastPass Vault Theft Confirmed: The December Reckoning

Post author:Prabhu Kalyan Samal
Post published:December 27, 2022
Post category:Cloud & Infrastructure Identity & Phishing Security

LastPass confirmed attackers copied encrypted vault backups after pivoting through a DevOps engineer's endpoint. KDF legacy and unencrypted metadata set the real risk.