Breach

Cybersecurity experts condemn LastPass breach announcement LastPass' announcement of a significant breach on its platform that resulted in hackers obtaining access to users' password vaults in November has been denounced by cybersecurity experts to downplay the severity of the intrusion, reports The Verge.

The incident dates back to October 21, but Louisiana hospital system first started sending letters to affected patients on December 23, raising eyebrows from some cybersecurity professionals.

Major cryptocurrency mining firm BIT Mining and cryptomining pool subsidiary BTC.com had nearly $3 million in assets stolen as a result of a cyberattack on Dec. 3, reports SiliconAngle.

Louisiana-based Xavier University had student and employee data potentially compromised following a cyberattack against its network last month, Government Technology reports.

Personal data compromised in Cincinnati state college breach The Cincinnati Enquirer reports that Cincinnati State Technical Community College had network-stored personal data potentially exposed following a cyberattack between Oct. 30 and Nov. 2.

LastPass case underscores the downside of password managers as a single point of failure and the need for security teams to focus on cloud security.

Numerous Comcast Xfinity email accounts have been hacked in a massive two-factor authentication bypass campaign, with the compromised accounts leveraged for resetting the passwords for other services, reports BleepingComputer.