LastPass Confirms Data Breach in Klue Supply Chain Attack

A legacy credential at market intelligence vendor Klue gave attackers OAuth tokens that unlocked LastPass's Salesforce environment and exposed customer records. Here is what happened and how to prevent it.