Password-manager LastPass is recommending that users follow precautionary steps while it works on fixing a vulnerability discovered over the weekend. LastPass has now provided details of the issue in a blog post, but warns that the obscure nature of the vulnerability means that the explanation is highly technical. Please ensure you are running the latest version (4.1.44 or higher), which can always be downloaded at. Most users will be updated automatically. On Saturday, March 25th, security researcher Tavis Ormandy from Google’s Project Zero reported a security finding related to the LastPass browser extensions. In the last 24 hours, we’ve released an update which we believe fixes the reported vulnerability in all browsers and have verified this with Tavis himself. The company said that this has now been done, and most users will be automatically updated to version 4.1.44. Google security researcher Tavis Ormandy reported a client-side vulnerability in the LastPass desktop browser extensions, but neither he nor LastPass released any details pending a fix. LastPass says that the browser extension vulnerability has now been patched, and that there is no evidence that it was ever exploited. LastPass says no passwords were compromised following reports of unauthorized logins

For IT departments looking to ensure password security, both 1Password and LastPass have strong solutions. Today, tools that were previously aimed at consumers now have strong enterprise offerings. That advice didn’t come with any solutions to help people properly manage them, though. For years, IT departments have told users to use complex passwords that aren’t repeated. I am not sure when password management services went from a prosumer concept to enterprise tools, but I am glad it’s happened. Request a FREE account today and discover how you can put your Apple fleet on auto-pilot at a price point that is hard to believe. Over 28,000 organizations leverage Mosyle solutions to automate the deployment, management and security of millions of Apple devices daily.

Apple Work is brought to you by Mosyle, the leader in modern mobile device management (MDM) and security for Apple enterprise and education customers.

Lastpass march 16