Dashlane discloses brute-force attack, encrypted vaults of fewer than 20 users downloaded. 2026-06-02 07:06 Password manager Dashlane has disclosed that "fewer than" 20 users on the personal subscription plan had their encrypted vaults downloaded following a brute-force attack launched by an unknown party. On May 31, 2026, the company said an "external" threat actor launched a brute-force attack against certain Dashlane user accounts with the aim of breaking two-factor authentication (2FA) Hacking & Cracking Read the original article: Password manager Dashlane has confirmed that a brute-force attack targeting user accounts triggered temporary account suspensions and authentication issues. The company first acknowledged the incident on May 31 after users reported receiving account suspension emails and experiencing login problems. "Your account has been temporarily suspended for security reasons as someone... Antivirus & Malware June 1, 2026 Engineers' weekends ruined as Dashlane's automatic protections kicked in This article has been indexed from www.theregister.com - ArticlesRead the original article: Password manager Dashlane suspends customer accounts amid brute-force attacks June 1, 2026 Dashlane launched Credential Risk Detection, a solution that continuously monitors and detects at-risk credential activity in real-time across the workforce, whether employees use a password manager or not. The web extension-based solution is the latest Dashlane innovation that shifts credential security from passive defense to proactive protection, enabling enterprises to... October 8, 2024

Dashlane exposes brute force attack, encrypted vault downloaded by less than 20 users. Ravi LakshmananJune 2, 2026Identity security/data protection Password manager Dashlane has revealed that fewer than 20 users of its personal subscription plans had their encrypted vaults downloaded following a brute force attack by an unknown party. On May 31, 2026, the company announced that an "external" attacker launched a brute force attack against certain Dashlane user accounts in an attempt to defeat two-factor authentication (2FA) protections and allow new devices to be registered to existing user accounts. It's unclear exactly how many users were targeted, but Dashlane said the high volume of attempts against these accounts resulted in account suspensions and authentication issues through built-in security controls. Access to the account has since been restored, but the company said the attackers were successful in a small number of cases and were able to download copies of encrypted vaults owned by fewer than 20 individual plan users. "We have notified each of these users directly." "If you are a Dashlane user and have not yet received a message from Dashlane regarding Vault risk, your Dashlane account will not be affected." Please note that you cannot access your vault data without your master password. Unless this password is simple and predictable, attempts to break into the safe are unlikely to be successful. Dashlane also noted that its internal systems were not affected by this incident. As a precaution, users are encouraged to review the devices registered to their accounts, remove any devices they don't recognize, enable 2FA, and use a strong master password that is "long, unique, and difficult to guess."

Cybersecurity brief - 2026-06-02. 2026-06-02 Major Incidents or Breaches * Dashlane, a password manager, disclosed a brute-force attack resulting in the download of encrypted vaults for fewer than 20 personal users. Affected accounts were automatically locked to prevent further compromise. Users also reported account lockouts due to login attempts from unfamiliar locations and devices [[3]] [[12]] [[30]]. * Over 30 npm packages under Red Hat's @redhat-cloud-services namespace were compromised in a supply chain attack dubbed "Miasma," distributing a variant of the Shai-Hulud malware to steal developer credentials and secrets [[4]] [[10]]. * A malicious supply chain campaign targeted developers using OpenAI Codex via a fraudulent npm package, codexui-android, which was designed to steal authentication tokens [[8]]. * Dutch police dismantled a botnet comprising 17 million devices that was used as a residential proxy network and facilitated various cybercrimes [[33]]. * Nearly 2,000 WordPress websites were infected with malware that uses Steam Community profile comments to hide command-and-control data [[13]]. * A fake BlueWallet application targeting Mac users was observed stealing passwords, crypto wallet information, and clipboard data [[40]]. * Threat actor DriveSurge hijacked thousands of websites to distribute malware via ClickFix and FakeUpdate campaigns [[9]]. * The Spanish National Police arrested an individual responsible for leaking sensitive data of government employees, including those from the National Cybersecurity Institute (INCIBE) [[11]]. * The Instagram accounts of high-profile individuals and organisations were compromised via Meta's AI support bot, allowing attackers to seize and deface accounts with pro-Iranian content [[27]]. Newly Discovered Vulnerabilities * A critical Windows Netlogon remote code execution vulnerability (CVE-2026-41089) is now being actively exploited. Organisations are urged to patch immediately [[16]] [[34]]. * A new Linux kernel vulnerability, known as CIFSwitch and present for 19 years, allows low-privileged users to escalate to root. Proof-of-concept exploit code has been released [[5]] [[37]]. * A vulnerability in the WP Maps Pro WordPress plugin (CVE-2026-8732) is being exploited to allow unauthenticated attackers to create administrative accounts on affected sites [[32]]. * Palo Alto Networks PAN-OS authentication bypass vulnerability (CVE-2026-0257) has been under active exploitation since four days after its public disclosure, with at least two observed attack waves [[5]] [[22]] [[38]]. Notable Threat Actor Activity * China-aligned threat groups launched Operation Dragon Weave, targeting officials and citizens in the Czech Republic and Taiwan with the AdaptixC2 agent for cyber espionage [[6]]. * Recent campaigns have seen attackers leveraging SVG files in phishing emails, bypassing traditional detection methods [[28]]. * Carnival Corporation, a major cruise line operator, was named among top targets in recent cyber incidents [[39]]. Trends, Tools, or Tactics of Interest * Attack vectors in containerised environments remain focused on exposed secrets, privilege misconfigurations, API compromise, and supply chain attacks [[1]]. * Malware campaigns are increasingly using unconventional channels for command-and-control, such as hiding payloads in Steam Community profiles [[13]]. * There is a trend towards faster exploitation of vulnerabilities following public disclosure, underscoring the importance of rapid patch management [[15]] [[38]]. * A new browser-based technique, FROST, enables websites to infer user activity on SSDs using JavaScript, raising concerns over novel tracking vectors [[26]]. * MSPs are moving beyond traditional vCISO tools, seeking integrated security growth platforms for broader service delivery [[7]]. Regulatory or Policy Developments Affecting the Security Industry * Anthropic will open its Mythos AI system to the EU's ENISA as part of Project Glasswing, reflecting deepening cooperation between the European Commission and AI vendors [[20]]. * Microsoft's legal threats against researchers disclosing zero-day exploits have sparked backlash, raising concerns about the chilling effect on vulnerability research [[21]]. * Oracle has shifted to a monthly patch cadence, with its first rollout addressing 77 vulnerabilities [[31]].