Product Marketing Manager

LastPass expands SaaS security tools with Smart Scanner and Admin updates. LastPass announced a series of product and customer experience updates that expand SaaS visibility, simplify credential management and streamline administration. Aug. 31, 2026 LastPass announced a series of product updates and customer experience enhancements focused on access management, visibility and security as organizations face an increasingly AI-driven threat landscape. The company pointed to findings from IBM's 2026 Cost of a Data Breach Report, which found the average data breach costs organizations $4.99 million. The report also found AI-driven attacks increased 56% and added an average of $1 million to breach costs, while 92% of organizations experiencing AI-related breaches lacked appropriate AI access controls. "As threat actors continue to automate and accelerate their attack tactics, strong identity, credential, and access management have become foundational security requirements, particularly for small and midsize businesses with limited resources," said Karim Toubba, CEO of LastPass. "To address these evolving challenges, LastPass is dedicated to delivering the innovations that help organizations and individuals reduce risk while making security easier to manage." Expanded SaaS Monitoring and SaaS Protect. LastPass expanded its SaaS Monitoring and SaaS Protect capabilities within its Business Max offering. The updates are designed to provide businesses with greater visibility and control over their SaaS environments. Persistent Monitoring maintains continuous visibility through a permanent connection to the LastPass browser extension. This allows monitoring to remain active even when users are signed out of LastPass. The company also expanded SaaS Protect usage rules, allowing administrators to establish more granular policies for specific users or groups. According to LastPass, the enhancements are intended to help organizations accelerate adoption, reduce manual workloads, improve security coverage and strengthen policy enforcement. The company said all of the enhancements had been fully released as of July, including Persistent Monitoring across all browser extensions. Mobile Smart Scanner converts passwords into credentials. LastPass also launched what it describes as the industry's first Mobile Smart Scanner. The feature allows users to scan passwords from printed lists, screenshots, handwritten notes and other physical sources using the LastPass Mobile app. The scanned passwords can then be converted into editable credentials that are ready for autofill. LastPass said the feature is designed to reduce manual data entry, save time and minimize errors while moving credentials into encrypted vaults. Redesigned LastPass Community. The company introduced a redesigned LastPass Community experience intended to make it easier for customers to find information, connect with peers and get more value from the platform. The updated Community includes a more intuitive interface, expanded self-service resources, topical portals and AI-powered search. LastPass said the platform is part of a broader self-service strategy that also includes social platforms such as Reddit and LinkedIn. Security and administration updates. LastPass said it completed independent SOC 2 and ISO 27001/27701 audits for the second consecutive year with zero findings. The company is also rolling out automatic enrollment for Dark Web Monitoring across consumer accounts. The change moves the service from a historically opt-in model toward a more proactive protection approach. Dark Web Monitoring checks user information against databases of compromised credentials and alerts users when personal data is found on dark web sites. The service also notifies users about potential threats such as weak passwords. LastPass has additionally completed its transition from the Legacy Admin Console to a single Unified Admin Console. The consolidated platform brings management capabilities into one centralized environment for administrators across business offerings. For Teams, Business and Business Max customers, LastPass has introduced a company-wide sign-up link that allows organizations to onboard their entire workforce through a single shareable link. The company said the change is intended to reduce administrative effort and accelerate deployment. Enterprise businesses generate large amounts of visual data from their video surveillance systems. Unfortunately, much of this data goes unused. Find out how businesses can optimize workflows by using AI video security to uncover hidden insights. Security frontline. The source of news, analysis and information specifically for security executives. Subscribe Today!

LastPass hit again: what users need to know about the latest breach. By: Jim Stickley and Tina Davis August 2, 2026 Password management company LastPass is once again notifying customers about a security incident involving exposed user information. According to the company, the latest breach did not occur directly on LastPass systems. Instead, attackers reportedly gained access to customer information through a compromise at Klue, a third-party software provider used by LastPass. The stolen data is believed to include customer support case information and certain personal details submitted by users while seeking assistance. At the time of disclosure, LastPass said there was no evidence that encrypted password vaults, master passwords, or stored credentials were accessed during the incident. However, security experts warn that even limited personal information can be valuable to cybercriminals. For users, the biggest concern is the increased risk of phishing attacks. Criminals may use information obtained from support tickets to create convincing phishing emails, text messages, (smishing) or phone calls (vishing) that appear to come from LastPass. If you use LastPass, be especially cautious of unexpected communications requesting login credentials, multi-factor authentication codes, or account information. You should never give these out to anyone. Never click links in unsolicited emails claiming your account needs immediate attention. Instead, visit the LastPass website directly through your browser. Remember that using a password manager, no matter which one it is, comes with a risk of your information being used to steal all of your passwords stored in them. That said, if there really is no other way you can keep track of using one password per website, proceed with caution. Whatever you do, make sure your master password is most definitely unique. Users should also enable multi-factor authentication, review account activity regularly, and ensure their master password remains unique and strong. Staying alert may be the best defense against criminals looking to turn stolen support data into a much larger security problem. The identity of the attackers has not been officially confirmed, some believe it was the group Icarus, a newly established extortion group. They also claim to have stolen information from several other companies. Investigators are still examining the incident, and no public attribution has been announced. However, the breach follows a series of security incidents that have kept LastPass under intense scrutiny since its major 2022 compromise.

LastPass Authenticator adds Face ID, Apple Watch, cloud backup for 2FA. Post Views: 7 LastPass Authenticator is a free application designed to deliver two-factor authentication (2FA) for user accounts and services that utilize time-based one-time passwords (TOTP). Enrollment process. The setup for new accounts is streamlined, allowing users to scan a QR code, import one from a saved image in the device's photo library, or manually input a secret key. To simplify configuration, the application provides preconfigured templates for numerous online services, such as Amazon, Amazon Web Services, Binance, Coinbase, Discord, Dropbox, Evernote, GitHub, PayPal, Slack, Twitch, and X. Custom entries can also be created for any service that employs TOTP authentication. * Amazon * Amazon Web Services * Binance * Coinbase * Discord * Dropbox * Evernote * GitHub * PayPal * Slack * Twitch * X The interface displays accounts in a searchable format, featuring service icons, account names, and a timer indicating when the current verification code will expire. Users can modify account details, categorize entries into groups, and manage multiple authenticators through a unified dashboard. The app supports transferring accounts between devices and exporting them as QR codes for backup purposes. Security measures. To safeguard locally stored authentication data, the application offers multiple protective features. Users can secure the app using biometric authentication via Face ID or a personal identification number (PIN). The Tap to Reveal function ensures verification codes remain concealed until accessed. Cloud backup capabilities allow users to restore accounts after replacing or resetting a device. A built-in Security Checkup feature reviews account settings to ensure optimal protection. Additional functionalities. Verification codes can be extracted directly from screenshots stored on the device, eliminating the need to switch between devices during setup. Users can preview the next authentication code before the current one expires, customize the display location of upcoming codes, and group digits for improved readability. * Extract verification codes from screenshots * Preview next authentication code * Customize display location of upcoming codes * Group digits for improved readability Conclusion. The integration of standard TOTP authentication with push-based approvals, biometric security, cloud backup, Apple Watch compatibility, and flexible import options positions LastPass Authenticator as a comprehensive tool for managing two-factor authentication across multiple online services through a centralized application.