Klue Supply Chain Incident & LastPass Response

LastPass wants to inform our customers of a security incident which recently occurred at one of our third-party suppliers and how that incident impacts LastPass and our customers.

Get LastPass Free

Create and store secure passwords for yourself, your team or business.

Why LastPass?

Remember fewer passwords and log in faster with our browser extension.

How LastPass works

LastPass zero-knowledge security model keeps your data private even from us.

Security architecture

Compare LastPass competitors, plans, and features in one place

Compare LastPass

Overview

Password management

Save and autofill

Password generator

Password sharing

Passkeys

Dark web monitoring

Security dashboard

Key Features

Free LastPass Premium trial, no credit card required.

Free LastPass Business trial, no credit card required.

Let our experts help you find the right plan and successfully deploy LastPass.

Sync passwords across all devices, monitor password health, data breaches and much more.

Personal

Premium password management for family or group of 6 people.

Families

Personal Plans

Password vault

Save & autofill

Mobile Smart Scanner

Automatic device sync

Emergency access

Personal password sharing

FOR INDIVIDUALS

30-day free LastPass Premium trial, no credit card required.

30-day free LastPass Families trial, no credit card required.

Limited to 1 device type and basic password management features.

Designed for businesses of all sizes, from small startups to enterprises.

Business

Simplify secure access straight from the browser with more admin control.

Business Max

For single teams just getting started with password management.

Teams

Designed to keep your clients' credentials protected and private.

Business Plans

User management

SaaS Monitoring

SaaS Protect

Secure Access Essentials

Business sharing

Multifactor authentication

Integrations

Single Sign-on

Identity management

For admins

Marketing teams

Legal teams

HR teams

Business leaders

IT admins

Solutions by role

Case studies

Webinars

Product demos

Events

Trust Center

Compliance Center

LastPass University

Resource Center

Pricing

Join the LastPass Partner Program to provide even more value to your customers.

Partner program overview

Managed Service Providers

Resellers

Cloud marketplaces

Technology Alliance Partners

LastPass Partner Program

Grow new revenue streams by meeting customer's security needs.

Looking for help or interested in becoming a LastPass partner? Get in touch with our partner team.

Connect with trusted LastPass Partners to support your security needs.

Partners

Self-service library of resources and guides for all LastPass products.

Support Center

Community forum

System status

Help

Personal support for all LastPass’ subscribed customers.

Support

Get LastPass free

Submit sales inquiry

Chat with sales

Request a demo

Find a partner

Contact sales

Log in

Move from discovery to control with a practical solution for shadow AI that protects innovation without limiting productivity

<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Shadow AI exists because employees access AI tools with personal credentials that bypass corporate identity controls</span><span data-ccp-props="{}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">47.11% of enterprise AI conversations happen via personal rather than corporate identities, creating an identity risk most IT teams are missing (The Hacker News / enterprise AI risk research, 2026)</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">80% of employee AI tools operate without IT oversight, with small and mid-sized companies averaging 414 unsanctioned AI tools per 1,000 employees (Reco, </span><em><span data-contrast="auto">The State of Agent Security 2026</span></em><span data-contrast="auto">)</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="auto">39.7% of all AI interactions involve the sharing of sensitive data; the average employee enters sensitive data into an AI tool once every three days. (Cyberhaven Enterprise AI Trends Report, 2025/2026)</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="auto">LastPass SaaS Monitoring is a SaaS discovery tool that surfaces both approved and unapproved AI/SaaS access across personal and corporate credentials. It works alongside SaaS Protect, which provides the controls to secure this access.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>

Key takeaways

Employees are adopting AI through personal identities. Discover how you can easily uncover and govern Shadow AI with LastPass SaaS Monitoring.

Shadow AI Is an Identity Problem: How to Secure Unauthorized AI Access 

<p><span style="font-size: 18px;">Looking for a recap of our August 2026 <a href="https://info.lastpass.com/od-securing-access-when-ai-is-the-user-ty?utm_source=marketo&amp;utm_medium=email&amp;utm_campaign=glb-b2b-wbn-2026-08-26-securing-access-when-ai-is-the-user">&ldquo;Who&rsquo;s Minding the Agents? Securing Access When AI Is the User&rdquo; webinar</a>, or weren&rsquo;t able to attend? This guide brings together the key research findings, peer poll data, and practical guidance from the session. Covering how AI agents are creating a new and distinct category of access and identity risk, and what organizations can do about it today.</span></p>
<h2>The access problem has changed: when AI is the user</h2>
<p>For the past decade, organizations structured their access governance around human users. The question was whether the right person had the right credentials to access the right system. AI agents change the question entirely. </p>
<p>When an agent acts on behalf of a user, four distinct identity risks emerge that traditional controls don&rsquo;t address:</p>
<h3>Risk 1: confused deputy</h3>
<p>An AI agent is authorized to perform Task A and, in the process, inherits permissions that also let it perform Task B &mdash; even though no one granted Task B explicitly. The agent ends up with more access than anyone intended to give it.</p>
<h3>Risk 2: broken attribution</h3>
<p>When an agent performs an action &mdash; accessing a file, sending a request, writing to a database &mdash; the audit log typically records that action under the human user the agent was acting for. If something goes wrong, it is impossible to determine whether the human did it or the agent did.</p>
<h3>Risk 3: privilege escalation</h3>
<p>Agents often chain multiple tools together across a workflow. At each step, they may request slightly broader access. By the end of a multi-step process, an agent that started with narrow permissions can accumulate access well beyond what any single step required.</p>
<h3>Risk 4: no clean revocation</h3>
<p>When a human employee leaves, their credentials are revoked. When an AI agent&rsquo;s task is complete, its credentials often aren&rsquo;t. API keys, OAuth tokens, and session credentials granted to agents persist in environments that were never built to track or expire them.</p>
<table>
    <tbody>
        <tr>
            <td><em>The average enterprise now runs AI agents on behalf of employees who may not know those agents exist &mdash; and the credentials those agents are using are no one&rsquo;s explicit responsibility.</em></td>
        </tr>
    </tbody>
</table>
<h2>The numbers behind the problem</h2>
<p>These findings come from research conducted ahead of the session, drawing on data from IT decision-makers, security leaders, and executives across industries and organization sizes.</p>
<ul>
    <li><strong>92%</strong> of organizations have adopted AI in some form</li>
    <li><strong>73%</strong> have no formal governance policy covering AI tool usage</li>
    <li><strong>61%</strong> of IT leaders lack visibility into which AI tools access their systems</li>
    <li><strong>42%</strong> of recent breaches involved compromised non-human credentials</li>
    <li><strong>8 in 10</strong> security leaders say AI agents represent a new and distinct access risk</li>
    <li><strong>400+</strong> new AI tools released per month, most without enterprise data protections</li>
</ul>
<table>
    <tbody>
        <tr>
            <td><em>AI adoption has outpaced governance in virtually every organization. The tools are deployed; the policies and controls to govern them have not caught up.</em></td>
        </tr>
    </tbody>
</table>
<h2>What your peers told us: live poll results</h2>
<p>These results come from live polls conducted during the webinar with attendees representing IT leaders, security managers, and executives across organization types and sizes.</p>
<h3>Which AI access challenge concerns your organization most?</h3>
<table>
    <thead>
        <tr>
            <th><strong>Response</strong></th>
            <th><strong>Count</strong></th>
            <th><strong>%</strong></th>
        </tr>
    </thead>
    <tbody>
        <tr>
            <td>AI adoption is underway, but we lack visibility into how it&rsquo;s being used</td>
            <td><strong>62</strong></td>
            <td>37%</td>
        </tr>
        <tr>
            <td>No enforced AI usage policy exists in our organization</td>
            <td><strong>51</strong></td>
            <td>31%</td>
        </tr>
        <tr>
            <td>AI tools requesting access to sensitive systems is our top concern</td>
            <td><strong>35</strong></td>
            <td>21%</td>
        </tr>
        <tr>
            <td>We have little or no technical controls over AI access</td>
            <td><strong>18</strong></td>
            <td>11%</td>
        </tr>
    </tbody>
</table>
<table>
    <tbody>
        <tr>
            <td><em>More than two-thirds of respondents cited either a lack of visibility or a lack of enforced policy &mdash; the two most fundamental prerequisites for any governance program.</em></td>
        </tr>
    </tbody>
</table>
<h3>Where is your organization in its AI governance journey?</h3>
<table>
    <thead>
        <tr>
            <th>Response</th>
            <th>Count</th>
            <th>%</th>
        </tr>
    </thead>
    <tbody>
        <tr>
            <td>We haven&rsquo;t started a formal AI governance program</td>
            <td><strong>66</strong></td>
            <td>40%</td>
        </tr>
        <tr>
            <td>We have some controls in place but no visibility into agent activity</td>
            <td><strong>49</strong></td>
            <td>30%</td>
        </tr>
        <tr>
            <td>We have a written policy but no consistent enforcement</td>
            <td><strong>41</strong></td>
            <td>25%</td>
        </tr>
        <tr>
            <td>We have a governance program in place for AI agent access</td>
            <td><strong>8</strong></td>
            <td>5%</td>
        </tr>
    </tbody>
</table>
<table>
    <tbody>
        <tr>
            <td><em>Only 1 in 20 attendees reported having a governance program in place for AI agent access. Ninety-five percent are still building toward it.</em></td>
        </tr>
    </tbody>
</table>
<h2>A five-step framework for AI agent governance</h2>
<p>The session&rsquo;s practical framework gives security and IT teams a structured path from no governance to a defensible program. Regardless of where they&rsquo;re starting from today.</p>
<p><strong>1.  </strong><strong>Identify</strong><strong>: </strong>Discover every AI tool in use across your environment: browser-based, desktop, IDE-integrated, and API-driven. This includes AI features quietly enabled inside existing SaaS platforms you already pay for. You cannot govern what you cannot see.</p>
<p><strong>2.  </strong><strong>Categorize</strong><strong>: </strong>Not all AI tools carry the same risk. Distinguish between enterprise-licensed tools with explicit data protection agreements and consumer or free-tier tools where your data may be used for model training. Categorize by account type, not just by tool name.</p>
<p><strong>3.  </strong><strong>Govern</strong><strong>: </strong>Define what access AI agents are permitted to have: which systems, which credentials, and under what conditions. Build policies that govern both human users and the agents acting on their behalf. A policy written only for humans will not cover what agents actually do.</p>
<p><strong>4.  </strong><strong>Monitor</strong><strong>: </strong>Put ongoing visibility in place for what agents are doing after you&rsquo;ve granted access. Watch for credential reuse, privilege escalation patterns, and any agent action that exceeds what the original task required.</p>
<p><strong>5.  </strong><strong>Protect</strong><strong>: </strong>Enforce the policies you&rsquo;ve defined. LastPass SaaS Monitoring (available in Business Max) gives IT visibility into which AI tools employees access through the browser, which accounts they use, and whether credentials are vault-managed or personal. SaaS Protect layers on access controls &mdash; warn, block, or redirect based on tool and account type.</p>
<h2>Questions your peers asked</h2>
<p>These are the questions submitted and answered by our speakers at LastPass. Jason Rasmussen CTO, Matt Greany Director of Product Management, and Emily Calo Manager of Product Marketing. </p>
<h3>Does LastPass have an enterprise solution to manage multiple employees leveraging AI agents on their behalf, and to understand how credentials are being used?</h3>
<p>LastPass Business Max includes SaaS Monitoring, which gives admins visibility into which AI tools and AI assistants employees are using, and flags the credentials tied to those tools that are weak, reused, or breached. Every login &mdash; human or agent-initiated &mdash; routed through LastPass is subject to the same password policies, shared-folder controls, and breach alerting as any other app. The key here is that the interactions and agents need to be browser-based for our visibility and enforcement to apply.  That&rsquo;s where all of our context resides currently.  What we don't yet offer is secure credential access for agents, or a dedicated non-human identity management (i.e., governing an agent's own API keys/tokens independent of a human login) &mdash; that's the gap Jason described as one of the chief problems facing businesses in the webinar.  This is something we&rsquo;re actively working on with the new CLI and MCP.  We&rsquo;re also exploring solutions for agents running in context outside of the browser on a device.   </p>
<h3>What specific tools are you using to discover shadow AI &amp; Shadow Applications to create visibility into what's actually being used?</h3>
<p>Discovery comes through the LastPass browser extension: as employees log into apps, SaaS Monitoring identifies AI tools and other SaaS apps in use, including ones IT never approved, and surfaces them in the Admin Console for categorization (approved / warn/ blocked).</p>
<h3>Is it generally safer to use native AI tool in a small practice, or would a third-party AI tool be better? Specific to use with LastPass. A&nbsp;Third Party (API) posing external risk, Native posing internal risk.</h3>
<p>Without having a lot more background context, I would say it&rsquo;s generally safer to run 3rd party AI vendor solutions than a homegrown LLM-based solution.  That&rsquo;s the stock answer if the use case primarily centers around unknown or unspecified uses.  An LLM isn&rsquo;t a one-size-fits-all solution, and there can be many instances where an organization would be better served by creating and training their own models.  However, good practice currently is to create intentional models with a very well-defined purpose and scope.  Something so explicitly defined is likely to be used for proprietary purposes like enabling a product rather than for internal ops efficiencies.  Simply taking an off the shelf model and training it with internal data could work just fine in theory, but none of the more advanced guardrails provided by the larger, more established commercial vendors will be in place.  You&rsquo;d effectively have to craft all of that bespoke to whatever is being used internally.  The potential risks could certainly outweigh the initial rewards.</p>
<h3>Does LastPass have a feature to place the credentials in the execution environment, rather than the prompt? Basically, a keyring type setup. There is open vault, which does something similar, would be great to see a LastPass Enterprise solution.</h3>
<p>This fits within core Secrets Management capabilities and currently runs outside of the LastPass product scope.  Prior to the proliferation of AI agents acting on behalf of humans, our strategic position has been that other vendor solutions like HashiCorp Vault and AWS Secrets Manager are already deeply penetrated into this market.  We historically serve human principals in their daily tasks while a secrets manager fits within the realm of DevOps and service principals.  AI agents acting at the behest of humans smudges the lines between these two worlds, and we are actively evaluating where and how we can best provide value in this emerging space.  Offering a CLI/MCP to provide agents secure access to agents is already in development, but there are certainly additional areas for us to potentially expand our offering as well.</p>
<h3>With the Claude Chrome extension combined with LastPass extension, Claude can access all applications in the LastPass user has access to. How do I secure LastPass to stop Claude using auto-filled credentials when driving the browser?</h3>
<p>Today there's no LastPass control that distinguishes a human-driven autofill from an agent-driven one.  LastPass autofill responds to a page request regardless of whether Claude or a person triggered it. Interim mitigation: restrict autofill via URL/domain restrictions, disable auto-fill-on-page-load in policy, and require master password re-prompt on autofill for sensitive items. That reduces exposure but doesn't fully solve it.  The use case is straightforward, and this is something we will evaluate from the Product side.</p>
<h3>We've looked at companies that do this sort of thing for you, like Datadog, but haven't moved forward yet. Does LastPass have a product that does the same thing (mainly sections 4 and 5 of the governance plan)?</h3>
<p>Yes &mdash; this five-stage framework maps directly to capabilities LastPass ships today, primarily through SaaS Monitoring and Business Max:</p>
<ul>
    <li><strong>Identify / Categorize:</strong> SaaS Monitoring discovers AI tools and apps via the browser extension and lets admins flag approved vs. shadow, shared vs. individual credentials, and weak passwords tied to those apps.</li>
    <li><strong>Govern:</strong> Admin Console policies route app logins through LastPass, enforce password policies, and control shared vault/folder access &mdash; the same controls used for any other app, applied to AI tools.</li>
    <li><strong>Monitor:</strong> Breach alerts fire when a vendor is compromised; credential health is visible in the Security Dashboard.</li>
    <li><strong>Protect:</strong> Policy controls let admins allow, restrict, or block specific apps, including unsanctioned SaaS and generative AI tools.</li>
</ul>
<p>One caveat worth stating plainly: this is the <em>app-level</em> governance loop &mdash; credentials tied to an AI tool a human logs into. It does not cover agent-native credentials (API keys, tokens, OAuth grants an agent holds and uses without a human login), but as mentioned this is something we are actively working against on a few different fronts.</p>
<h3>Is this currently available on LastPass?</h3>
<p>Every pillar, one through five, is available for LastPass Business Max customers.  The Governance aspects are also dictated by the organization, and LastPass provides controls to enact and monitor the guidance.</p>
<h3>Matt brought up that LastPass is working on a way to direct the agents to LastPass. Is that something that has a timeframe for release?</h3>
<p>This is correct.  We have started working on both a revamped CLI as well as an MCP that will allow agents to securely access Vault and Shared items on a user&rsquo;s behalf.  We have some functional dependencies to clear presently, and I expect to have a clearer picture on when this functionality will become generally available as we get closer to end of year.</p>
<h3>How does it identify the various AI platforms that are being used? Does it use DNS filtering to find them?</h3>
<p>All of our visibility comes directly from the browsers where the LastPass extension is deployed and managed.  This provides a wealth of information in terms of SaaS applications accessed, who&rsquo;s accessing them, and how they are authenticating.  We also use the same lightweight extension to apply governance controls and policies set by the organization&rsquo;s admin.</p>
<h3>At present my company has a small pool of people that use LastPass for credentials, far exceeding the number of people using AI tools. Would LastPass licensing need to be purchased for everyone to make use of the level of LastPass that has the monitoring?</h3>
<p>SaaS Monitoring's visibility depends on being licensed for Business Max and extension deployment.  You need LastPass deployed to the users whose activity you want visibility into. If most AI-tool users aren't LastPass users today, the practical answer is you'd need to extend LastPass licensing to that population to monitor it.  It&rsquo;s also worth noting you instantly have visibility &amp; governance into all SaaS applications and sites &ndash; not just AI usage.</p>
<h3>We already pay for the enterprise licensing; is it already part of what I pay for or how much additional does it cost?  </h3>
<p>SaaS Monitoring &amp; Protect are available in Business Max only.  I would suggest reaching out to your account executive to ensure you&rsquo;re at the correct product tier to use this capability.</p>
<h3>What are some safeguards in place in protecting LastPass vaults to avoid other AI agents from breaching users&rsquo; accounts?</h3>
<p>Standard vault protections apply regardless of whether the threat actor is human or an agent: zero-knowledge encryption, MFA enforcement, device restriction policies, and breach/dark-web monitoring alerts. Worth being clear, this is the same protection model as any credential-stuffing or account-takeover attempt &mdash; LastPass doesn't currently have an AI-specific detection layer distinguishing agent-driven attack patterns from human ones.</p>
<p>For individuals and companies that want additional protection, LastPass users can make use of existing security settings such as:</p>
<ul>
    <li><a href="https://support.lastpass.com/s/document-item?language=en_US&amp;bundleId=lastpass&amp;topicId=LastPass/Require_a_Password_Reprompt.html&amp;_LANG=enus">Requiring a master password re-prompt</a> </li>
    <li><a href="https://support.lastpass.com/s/document-item?language=en_US&amp;bundleId=lastpass&amp;topicId=LastPass/disable-autofill.html&amp;_LANG=enus">Disabling autofill for sensitive sites</a> </li>
</ul>
<p><strong>See what&rsquo;s running in your environment</strong></p>
<p>Automatically discover AI tools and SaaS applications across your organization with LastPass Business Max. Talk to our team to start a free trial.</p>
<p>
</p>
<div class="button-container"><a href="https://www.lastpass.com/trial/business?max=true"><button class="lp-button lp-button--primary">Try LastPass for free</button></a></div>
<p>&nbsp;</p>

AI agent access risk: webinar recap and guide

AI agents create access risks human controls miss. Get the research, peer poll data, and a five-step governance framework from our webinar recap.

Who's Minding the Agents? Webinar Recap & Resource Guide.

10 Best CASB Tools for 2026: Compare Top Solutions for Lean IT Teams & Enterprises

Compare the 10 best CASB tools for visibility, access control, compliance, and shadow IT management. See which solutions work best for lean IT teams and enterprises.

10 of the best CASB tools (including an option for small to midsize businesses)

Your Practical AI Governance Compliance Guide: Mapping Access Controls to SOC 2, HIPAA, GDPR, ISO 27001, & More

<ul>
<li data-leveltext="" data-font="Symbol" data-listid="11" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">An AI acceptable use policy&nbsp;alone&nbsp;isn&rsquo;t&nbsp;enough. Auditors&nbsp;expect&nbsp;controls&nbsp;to&nbsp;be&nbsp;enforced&nbsp;in real time.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="11" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Five core&nbsp;controls&nbsp;can help you prove&nbsp;AI governance,&nbsp;even without a dedicated security team:&nbsp;Discovery,&nbsp;Classification,&nbsp;Authentication,&nbsp;Governance, and&nbsp;Auditability.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="11" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">Frameworks like SOC 2, HIPAA, GDPR, ISO 27001, ISO 42001, NIST AI RMF, and the EU AI Act all&nbsp;require&nbsp;some form of&nbsp;access&nbsp;governance evidence.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="11" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="auto">The biggest blind spots for&nbsp;small to mid-sized teams&nbsp;are personal AI accounts and shared credentials, which undermine user attribution.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="11" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="auto">If&nbsp;you've&nbsp;just begun discussions on&nbsp;governing&nbsp;AI access, start with&nbsp;this guide:&nbsp;</span><a href="https://blog.lastpass.com/posts/allow-warn-block-ai-governance-model"><span data-contrast="none"><span data-ccp-charstyle="Hyperlink">Allow, Warn, Block: A&nbsp;</span><span data-ccp-charstyle="Hyperlink">Practical AI Governance Model for Lean&nbsp;</span><span data-ccp-charstyle="Hyperlink">Teams</span></span></a><span data-contrast="auto">.&nbsp;Then,&nbsp;return&nbsp;to this article&nbsp;to build&nbsp;controls that&nbsp;pass&nbsp;auditor scrutiny.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>

TL; DR AI Governance Compliance for Lean IT Teams 

AI governance controls for growing IT teams

Prove AI governance compliance with 5 access controls auditors expect. Learn how discovery, access controls, and SaaS monitoring support compliance.

   How Do You Prove AI Governance Compliance? 5 Access Controls Auditors Expect to See 

June 22, 2026, Five Eyes AI Warning: What Boards and CISOs Must Do Now

<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">On June 22, 2026, the Five Eyes alliance&nbsp;warned&nbsp;that AI is&nbsp;accelerating cyber threats&nbsp;and&nbsp;organisations&nbsp;have months, not years,&nbsp;to&nbsp;act.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Because attackers are&nbsp;increasingly&nbsp;leveraging&nbsp;AI to target&nbsp;identities&nbsp;&amp;&nbsp;credentials, the alliance&nbsp;now views&nbsp;access control as a governance issue, requiring board-level oversight.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">Boards should expect evidence, not claims, that access controls will hold under AI-accelerated conditions.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:720,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:279,&quot;335559991&quot;:360}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="auto">In the next&nbsp;90 days, boards should&nbsp;assess visibility into SaaS &amp; AI usage,&nbsp;validate&nbsp;access controls, and&nbsp;establish reporting that&nbsp;demonstrates&nbsp;controls are&nbsp;working&nbsp;effectively.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:720,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:279,&quot;335559991&quot;:360}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="auto">LastPass gives&nbsp;your team&nbsp;AI app&nbsp;discovery, authentication&nbsp;controls, and audit-ready access logs to&nbsp;align with the Five Eyes advisory.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>

60-second board brief: What leadership needs to know

What the Five Eyes AI warning means for boards, CEOs, and security leadership

The Five Eyes alliance warns AI is accelerating cyber risk and supercharging credential-based attacks. Learn what CISOs and executives must do now.

Matthew McWhirter

Vice President, Asia Pacific, LastPass

What the June 22, 2026, Five Eyes AI Warning Means for Boards, CEOs, and Security Leadership

Black Hat USA 2026 Las Vegas: Key trends, sessions, and takeaways

<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Black Hat USA 2026 will be held at the Mandalay Bay Convention Center in Las Vegas, Nevada, from August 1&ndash;6, 2026 (Trainings: Aug 1&ndash;4; Briefings: Aug 5&ndash;6; Business Hall Aug 4-6).</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">This year's most-talked-about&nbsp;Briefings&nbsp;topics&nbsp;include&nbsp;AI offense &amp; defense,&nbsp;supply chain&nbsp;security,&nbsp;and&nbsp;AI-driven exploitation of vulnerabilities in&nbsp;hardware &amp; embedded systems.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">Registration options range from&nbsp;Briefings-only passes to full&nbsp;Training tracks with professional certifications.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="auto">Yes, LastPass will be at Black Hat USA 2026. Scroll down to find out where to meet us and what we&nbsp;have in store for you.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="auto">Don't&nbsp;skip the FAQ section.&nbsp;There's&nbsp;an honest answer to the question&nbsp;your finance team may be asking:&nbsp;Is this conference&nbsp;actually worth&nbsp;the budget?</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li>
</ul>

What to Know Before You Read

Black Hat USA 2026

Everything you need for Black Hat USA 2026: Schedule, sessions, pricing, and the top cybersecurity trends shaping modern defense

Your Complete Guide to Black Hat USA 2026, Las Vegas: Where Research Meets Real-World Defense

A Guide to Shadow IT Management for Small to Midsize Businesses

FAQs: Shadow IT Management

A guide for business owners on shadow IT management, SaaS sprawl, and credential management.

Are Your AI Tools Putting Attorney-Client Privilege at Risk?

<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">AI agents can&nbsp;reuse&nbsp;context across&nbsp;client boundaries&nbsp;if not explicitly scoped,&nbsp;creating exposure that&nbsp;traditional&nbsp;&ldquo;ethical walls&rdquo;&nbsp;don&rsquo;t&nbsp;cover.</span><span data-ccp-props="{}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">When client data passes through a third-party&nbsp;platform&nbsp;as part of an agentic workflow,&nbsp;firms may face arguments&nbsp;that&nbsp;attorney-client privilege has&nbsp;been weakened or&nbsp;waived, even if no disclosure was intended.</span><span data-ccp-props="{}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">Courts have already&nbsp;sanctioned attorneys for&nbsp;submitting&nbsp;unverified&nbsp;AI-generated citations, signaling&nbsp;tightening expectations around AI oversight&nbsp;(Mata vs. Avianca).</span><span data-ccp-props="{}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="auto">As&nbsp;agentic AI usage grows, firms bear increasing responsibility to&nbsp;demonstrate&nbsp;oversight, auditability, and reasonable care.</span><span data-ccp-props="{}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="auto">If you&nbsp;don&rsquo;t&nbsp;know which tools your attorneys are&nbsp;authenticating into, you lack both visibility and control over where client data can flow.</span><span data-ccp-props="{}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="auto">Enterprise AI governance&nbsp;</span><span data-contrast="auto">doesn&rsquo;t&nbsp;begin with tracking&nbsp;downstream AI actions&nbsp;but&nbsp;controlling and documenting&nbsp;where access is granted.</span><span data-ccp-props="{}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="7" data-aria-level="1"><em><span data-contrast="auto">Every downstream risk starts with a login</span></em><span data-contrast="auto">. LastPass operates&nbsp;as a top-layer governance&nbsp;control,&nbsp;giving you&nbsp;visibility into every SaaS&nbsp;and AI&nbsp;tool&nbsp;your&nbsp;attorneys are&nbsp;logging&nbsp;in&nbsp;to.&nbsp;With LastPass,&nbsp;you have a defensible record of how AI tools entered your environment and who has&nbsp;the ability to use them.</span><span data-ccp-props="{}">&nbsp;</span></li>
</ul>

Most firms have AI policies but few can defend them. Explore why agentic AI breaks traditional safeguards and what “reasonable care” really requires today.

Client Confidentiality in the Age of AI Agents: A New Duty of Care

<p>One chapter in the saga of infostealer malware has ended&mdash;at least for now&mdash;after a global law enforcement takedown of Lumma Stealer in mid-May. US, European, and Japanese authorities, with the help of tech companies including Microsoft and Cloudflare, took down, suspended, and blocked approximately 2,300 malicious domains that made up part of the infostealer&rsquo;s backbone. The FBI also seized domains that served as login panels allowing other criminals to access and use the infostealer. Although, this seizure is intended to effectively prevent criminals from being able to access Lumma to compromise computers and steal data, the overall stealer threat will remain prevalent for the foreseeable future. </p>
<p><em>(Interested in learning more about the infostealer threat outlook? Read the LastPass TIME team&rsquo;s threat predictions and analysis on </em><a href="https://blog.lastpass.com/posts/2025-cybersecurity-trends"><em>what direction infostealers and other threats are heading</em></a><em>.) </em></p>
<h2>What is Lumma?</h2>
<p><strong><em> </em></strong></p>
<p>Lumma Stealer, also known as LummaC2, dominated the expanding stealer market with significant campaigns since it emerged as early as late 2022. Since its initial release, Lumma&rsquo;s developers have released multiple upgraded versions of the software. Before the malware-as-a-service (MaaS) platform was dismantled, the FBI linked Lumma to around <a href="https://www.malwarebytes.com/blog/news/2025/05/lumma-information-stealer-infrastructure-disrupted">10 million infections</a> globally. Lumma&rsquo;s follow-on attacks involving stealing credentials, cryptocurrency data, and credit card information have resulted in an estimated <a href="https://cyberscoop.com/lumma-infostealer-widespread-victims/">$36.5 million USD</a> in credit card theft in 2023. The malware hit individuals and a wide range of industries, including Fortune 500 companies, airlines, universities, banks, and hospitals. </p>
<p>What makes this stealer particularly effective is that it continues to evolve to bypass security layers even as defenders are responding to the threat. On top of grabbing browser-stored passwords and cookies, it&rsquo;s also capable of extracting autofill data, email credentials, File Transfer Protocol (FTP) data, and two-factor authentication tokens and backup codes. Using its MaaS platform, its creators sold access to the malware on multiple underground markets and platforms like Telegram. </p>
<h2>What comes next?</h2>
<p><strong><em> </em></strong></p>
<p>This takedown is a major win for law enforcement and will help disrupt the initial access broker ecosystem in the near term. However, this is an ecosystem that has demonstrated its resilience again and again. The number of existing infostealer families, the open access to numerous source codes of previous infostealers, and the constant demand create a lucrative environment with very low barriers to entry. Given the resiliency of this market, other infostealer will likely quickly step in and fill in the gaps left after the Lumma takedown. </p>
<p>A similar pattern previously played out with other similar takedowns. On October 28, 2024, Operation Magnus disrupted the RedLine and META infostealers. RedLine was a significant stealer last year up until the takedown, after which Lumma grew in popularity and took over a portion of the market share previously held by RedLine. Redline infected 9.9 million hosts, or 43% of all infostealer infections observed by Flashpoint in 2024. The next four most-prolific infostealers in 2024, including RisePro, SteaC, Lumma Stealer, and Meta Stealer, infected a <a href="https://cyberscoop.com/infostealers-cybercrime-surged-2024-flashpoint/">combined 7 million hosts</a>. </p>
<p>We expect to see something similar following the Lumma Stealer takedown operation. The disruption effect following takedown is real, but there are still some new infections and logs for sale that were likely stolen before the infrastructure was taken down. Additionally, just because Lumma&rsquo;s infrastructure was dismantled, a lot of the data it stole likely continues to live on the dark web&mdash;thanks to the cybercriminal ecosystem that resells this information. <span>Additionally, <a href="https://blog.checkpoint.com/security/lumma-infostealer-down-but-not-out/">CheckPoint</a> reported Lumma&rsquo;s developers are already trying to rebuild and restart their operations, which may or may not be successful.&nbsp;</span>As SpyCloud&rsquo;s <a href="https://www.linkedin.com/posts/thilligoss_lummatakedown-lummareallynowork-stealc-activity-7332888157480198146-u94p">Trevor Hilligoss shared</a>, daily new Lumma infections have trended downward following the takedown but not as much as expected. Continued monitoring will be necessary to determine the takedown&rsquo;s impact. </p>
<p>Long-standing groups such as Vidar and Stealc are good examples of this, but other newer families, such as Acreed, will also be well positioned to increase their market share. <span><a href="https://www.bleepingcomputer.com/news/security/russian-market-emerges-as-a-go-to-shop-for-stolen-credentials/">ReliaQuests</a> already reported Acreed is rapidly gaining traction following the Lumma takedown. <a href="https://webz.io/dwp/acreed-infostealer-everything-we-know-so-far/">Over 4,000 logs</a> stolen by Acreed were reportedly uploaded to the Russian Market within its first week of operations.&nbsp;</span>Nexus has also gained some traction over the last week in Lumma&rsquo;s absence. Further, former affiliates and/or administrators associated with Lumma itself may split off to create their own offerings.</p>
<p style="text-align: center;">
<img src="https://static.lputil.com/-/media/ffef2d4ef9d544babc2169a6d0274059.jpg?h=310&amp;w=624" >&nbsp;</p>
<p style="text-align: center;"><em>Daily new LummaC2 infections (Source: Trevor Hilligoss)</em></p>
<h2>How to protect yourself against infostealers</h2>
<p>The threat from infostealers will remain very real for the foreseeable future and continue to adapt. Oftentimes, stealers are used in indiscriminate campaigns. Additionally, the sheer volume of data that has been dumped on the internet is immense. That means anyone is fair game and should take action to protect themselves following that assumption that they could be targeted. </p>
<ul>
    <li><strong>Use strong, unique passwords for every account.</strong> This will prevent credential stuffing attacks, which is a common tactic where threat actors insert stolen usernames and passwords. That way, if one password is exposed, it won&rsquo;t give access to all your other accounts where you reuse the same password. Also, consider using a password manager to securely and conveniently store them.</li>
    <li><strong>Enable MFA on your accounts.</strong> While this measure isn&rsquo;t failproof on its own, it adds an additional layer of defense and makes you a harder target.</li>
    <li><strong>Be on guard for phishing attempts.</strong> Infostealers often spread through phishing emails and malicious downloads. </li>
    <li><strong>Check HaveIBeenPwned to monitor potential exposure </strong>if you&rsquo;re worried you may have been infected by an infostealer. </li>
</ul>

What the Lumma stealer takedown means for the infostealer market and your personal data

Lumma Stealer, also known as LummaC2, dominated the expanding stealer market with significant campaigns since it emerged as early as late 2022

Dark Side of the Lumma: What the Lumma stealer takedown means for the infostealer market and your personal data

Passkey vs Password: Which is More Secure? | LastPass

FAQs: Passkey vs password

Explore the differences between passkeys and passwords. Learn how LastPass enhances security and simplifies access with advanced authentication methods.

Blog

Blog

Recent

News & Insights

Cybersecurity

Product Tutorials

Threat Intel

Product Updates

Tips And Tricks

Klue Supply Chain Incident & LastPass Response

Dark Side of the Lumma: What the Lumma stealer takedown means for the infostealer market and your personal data

Passkeys Vs. Passwords: Which Login Method Is Safer in 2026?

Shadow AI Is an Identity Problem: How to Secure Unauthorized AI Access

Who's Minding the Agents? Webinar Recap & Resource Guide.

Subscribe & Save 20% off Premium or Families plans

10 of the best CASB tools (including an option for small to midsize businesses)

How Do You Prove AI Governance Compliance? 5 Access Controls Auditors Expect to See

What the June 22, 2026, Five Eyes AI Warning Means for Boards, CEOs, and Security Leadership

Your Complete Guide to Black Hat USA 2026, Las Vegas: Where Research Meets Real-World Defense

A Guide to Shadow IT Management for Small to Midsize Businesses

Client Confidentiality in the Age of AI Agents: A New Duty of Care

Klue Supply Chain Incident & LastPass Response