In the meantime, the aforementioned workarounds are your best bet. As and when that happens, we will update this guide accordingly. LastPass recently announced it is consolidating the enterprise-focused LastPass MFA app into the LastPass Authenticator app and integrating the formers.

As far as the official stance on this matter is concerned, the developers are aware of this issue, but they haven’t given out any ETA for the rollout of a fix. These were the two different methods that shall help you fix the issue of LastPass Multi Factor Authentication MFA not working/blank. It will automatically be installed and enabled on your PC.Now download an older version of this extension from its site.After that, select Remove from Chrome > Remove.Then click on the overflow icon next to LastPass.Click on the extension icon situated next to address bar.Listen to this podcast using the embedded player below. Listen to the podcast in the player below or on your favorite podcasting platform!

The threat actor then exported the native corporate vault entries and content of shared folders, which contained encrypted secure notes with access and decryption keys needed to access the AWS S3 LastPass production backups, other cloud-based storage resources, and some related critical database backups, the company says.Īccording to Caveza, this exemplifies why organizations need a strong patch management program and end user awareness and training to ensure that users are updating any devices they use for work, including those at home. This allowed the attacker to capture the employee’s master password as it was entered, after the employee authenticated with MFA, and gained access to the DevOps engineer’s LastPass corporate vault. The threat actor targeted the engineer’s home computer, exploited a third-party media software package bug to gain remote code execution and implanted keylogger malware. To obtain decryption keys needed to access the company’s AWS S3 buckets, the threat actor targeted one of the four DevOps engineers who had access to those decryption keys. Late last month, LastPass revealed that the same threat actor that accessed portions of the LastPass development environment and source code that has forced the company since August 2022 to provide updates as new information is revealed, apparently accessed a shared cloud-storage environment obtained access keys and decryption keys by targeting a developer’s home computer. On this episode of the My TechDecisions Podcast, we discuss the LastPass breach and what IT security teams can learn from it with Scott Caveza, senior research manager at Tenable.

Lastpass mfa