Attackers obtained encrypted password vaults from some Dashlane user accounts

Collection of Help Net Security headlines (June 5, 2026): Dashlane disclosed a brute‑force attack that allowed a threat actor to access some customer accounts and copy encrypted password vaults (no evidence of internal system compromise). Let’s Encrypt announced work on Merkle Tree Certificates to add post‑quantum authentication at web scale (staging late‑2026, production target 2027). Cisco confirmed active exploitation of a Catalyst SD‑WAN privilege‑escalation 0‑day (CVE‑2026‑20245) with no patch available; exploitation requires netadmin privileges or chaining with CVE‑2026‑20182/CVE‑2026‑