Dashlane explains how attackers managed to download encrypted password vaults
2026-06-05T08:51:47Z•0dc0e3d2ad7c8a400908ae76ae071cf6b91d97dd5096306069a678541dc70b30
BadHostBitLocker-zero-dayCISA-credentialsChromiumDashlaneGitHub-secretsInstagram-account-takeoverMeta-AI-chatbot-exploitRed-Hat-packagesSSD-side-channelStarletteTeamPCPUbuntu-outagebotnet-takedowncredential-leakcritical-vulnerabilitydaemon-tools-backdoorencrypted-vault-theftexploit-code-disclosurenpm-backdooropen-source-vulnerabilitypassword-manager-breachprompt-injectionresidential-proxysupply-chain-attack
What happened
Ars Technica reported a string of high-impact security incidents (May–June 2026) spanning password-manager thefts, supply‑chain backdoors, critical open‑source vulnerabilities, and exploit code disclosures. Key items include attackers downloading encrypted Dashlane vaults (with an opaque vendor advisory), a Meta AI support chatbot abused to steal Instagram accounts, dozens of Red Hat packages backdoored via the official NPM channel, a critical "BadHost" vulnerability in Starlette impacting millions of AI agents, a zero‑day that defeats default Windows 11 BitLocker protections, published Chrome
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- 0dc0e3d2ad7c8a400908ae76ae071cf6b91d97dd5096306069a678541dc70b30
- Enrichment time
- 2026-06-05T08:51:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.