Now that password managers are vulnerable, is anything secure?

It hasn't been a good week for password managers or operating system keychains

First, LastPass revealed on Monday that it detected suspicious activity on its network. Although there's no evidence that any encrypted user data or accounts were accessed, LastPass email addresses and password reminders were compromised.

Then on Wednesday, six security researchers released a paper revealing flaws in OS X and iOS, which open the systems up to some particularly nasty malware. The malware could be used to bypass sandbox security protections, and grab passwords from other apps, including Apple's built-in OS X Keychain. Read more...