“Yes, LastPass had two bad vulnerabilties, but you need to read the rest of the story” by Al Berg

Password manager vulnerabilities