Streaming service Plex unaware ‘of any unpatched vulnerabilities’ following LastPass report

The streaming service Plex defended the security of its software on Wednesday following a claim that it was exploited in an attack on password manager LastPass.

Plex’s comments came after LastPass revealed Tuesday that an intruder had leveraged a “vulnerable third-party media software package” to gain access to an engineer’s home computer in August 2022.

After compromising the engineer’s home computer, the attacker was able to access corporate backups of customers’ sensitive information stored in an encrypted format, LastPass said. …

access attack august backups claim comments computer corporate engineer exploited home intruder lastpass manager media package party password password manager plex report security service software streaming third third-party tuesday unpatched vulnerabilities vulnerable