LastPass confirms data breach in Klue supply chain attack
LastPass disclosed a breach where attackers accessed customer data via stolen OAuth tokens from the Klue supply chain attack, exploiting its Salesforce environment. The incident highlights third-party risks in SaaS integrations.
This breach underscores the importance of securing OAuth tokens and monitoring third-party integrations. Implement token rotation and enhanced logging for supply chain partners to detect and mitigate similar threats.
LastPass confirmed that attackers gained unauthorized access to customer data through its Salesforce environment. The breach stemmed from stolen OAuth tokens during the Klue supply chain attack earlier this month.
The attack highlights vulnerabilities in SaaS platforms and the risks associated with third-party integrations. OAuth tokens, which grant access to APIs, were exploited to infiltrate sensitive data systems.
To address such threats, organizations should enforce token rotation policies, monitor SaaS partner activities, and deploy robust anomaly detection systems for API usage.