Home
Apps
Apps News
Last Acknowledges New Vulnerability in Browser Extension, Says It's Working on a Fix

Last Acknowledges New Vulnerability in Browser Extension, Says It's Working on a Fix 5g5t3n

By Shubham Verma | Updated: 28 March 2017 20:23 IST

Highlights

The vulnerabilities were reported by Google researcher Tavis Ormandy
Last responded to say it's working on a fix
Neither Ormandy or Last have provided details about the vulnerability

ment

Internet vulnerabilities are becoming more common with each ing day, and pointed out several vulnerabilities in the service that were patched up shortly after. Now however, a new vulnerability has come to light, and the management service says it is working to fix it. 2t1h4i

Once again reported by Ormandy, the client-side vulnerability allows for remote code execution (RCE) in the Last v4.1.43 extension for Chrome. Ormandy on Sunday shared details with Last, which on the same day said it was aware of the issue and asked s to stay tuned for more details.

In a blog post on Monday, Last said it is "actively addressing the vulnerability", and that the attack demonstrated by Ormandy was "unique and highly sophisticated." It didn't reveal any further details.

"We don’t want to disclose anything specific about the vulnerability or our fix that could reveal anything to less sophisticated but nefarious parties. So you can expect a more detailed post mortem once this work is complete."

"In the meantime, we want to thank people like Tavis who help us raise the bar for online security with Last, and work with our teams to continue to make Last the most secure manager on the market," Last wrote in its blog post on Monday.

In the post, Last also laid down some best practices for s, including using the Last Vault as a launch pad, enabling two-factor authentication on any service that offers it, and to be wary of phishing attacks.

Comments

For the latest reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.