Dashlane Encrypted Vaults Stolen in 2FA Brute Force Attacks
NEOSEC enrichment — no mirror of the original source
On Monday, June 1, 2026, the support page for password manager Dashlane published a security advisory disclosing "a brute force attack against certain Dashlane user accounts" that began the previous day. Accounts targeted by the attack were
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesMore on Encrypted
Other advisories
- Not ratedosv:CLEANSTART-2026-NN31830Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello
- Not ratedosv:CLEANSTART-2026-UQ25428When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface
- Not ratedosv:CVE-2026-116729libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001a
- Not ratedosv:CVE-2026-116728libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x0024
- HighCVE-2026-65629Weak PBKDF2 parameters for password-encrypted private-key export in jose
- Not ratedosv:CVE-2026-65629Weak PBKDF2 parameters for password-encrypted private-key export in jose
- Not ratedosv:CVE-2026-98941ext4: don't enable large folios on encrypted inodes
- Not ratedosv:CLEANSTART-2026-AM71650When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface
Other news entries
- Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential RotationNewsThe Hacker News
- Railway discloses unauthorized access to customer environment variablesBreachpwn.watch
- Inside AvisLoader: A Windows Malware Loader Built to Resist DisruptionNewsBleepingComputer
- Ransomware recovery CEO charged over secret ransom paymentsNewsBleepingComputer
- Encrypted instructions trick Copilot CLI into spilling developer secretsNewsCSO Online
- OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory UnencryptedNewsThe Hacker News
- New hardware device can RAM into encrypted memory, expose your dataNewsThe Register — Security
- New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential ComputingNewsThe Hacker News
Source: https://support.dashlane.com/
ID