Dashlane 2FA brute-force; encrypted vaults for <20 accounts
Teaser from the source
Beginning May 31 2026 attackers brute-forced six-digit 2FA codes to register new devices on Dashlane accounts and downloaded encrypted vaults for fewer than 20 personal accounts. Dashlane said its own systems were not compromised and worked with affected customers.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on brute-force
Other advisories
- Not ratedosv:CVE-2026-65825OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants
- HighCVE-2026-91973Vikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute-force floor on account passwords in code.vikunja.io/api
- Not ratedosv:CVE-2026-111886phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta 2FA Brute-Force via remove-twofactor Endpoint
- Not ratedosv:CVE-2026-111356MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force
- Not ratedosv:CVE-2026-61611Lychee: Missing rate limiting on album password unlock endpoint allows brute-force attacks
- Not ratedosv:CVE-2026-110770Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force
- Not ratedosv:CVE-2026-93346Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Condition
- Not ratedosv:CVE-2026-109949FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard
Other news entries
- Thai Broadband Provider Hacked via Fortinet VulnerabilityNewsSecurityWeek
- The Top 10 Attack Surface Exposures in 2026NewsThe Hacker News
- Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users DownloadedNewsThe Hacker News
- Dashlane password manager users locked out by brute force attacksNewsBleepingComputer
- Password manager Dashlane suspends customer accounts amid brute-force attacksNewsThe Register — Security
- SSA-850560 V1.0: Use of 4-Digit PIN in SENTRON PAC3200 DevicesNewsSiemens ProductCERT
- Passwortmanager Dashlane: Angreifer kopieren fast 20 Passwort-VaultsNewsheise Security
- Passwortmanager: Hacker erbeuten Passwort-Tresore von Dashlane-NutzernNewsGolem.de — Security
Source: https://pwn.watch/i/dashlane-2fa-bruteforce-june
ID