LastPass CTO Sean Cassidy demonstrated a Phishing attack at ShmooCon on Saturday. The attack is made possible due to design elements within the password managers core functions. Because LastPass users are trained to recognize and understand, theyre not going to be on alert or suspect an attack is taking place. LastPass has released an update that will prevent a user from being logged out by the Phishing tool, thereby mitigating the risk of the attack, he said.”]

