Zero-day attack on Electron framework
The attached article suggests that the Electron framework, which 1Password uses, was the target of a recent zero-day attack. What should 1P users be aware of regarding the security of their data?
1Password Version: 8.10.16
Extension Version: 2.15.1
OS Version: 13.5.2
Browser: Safari
Comments
-
Hello @Newbie2018! 👋
Thank you for the question! We released an update (8.10.15) on September 13th to address this:
You can read more here: Security advisory for 1Password 8 for Mac, Windows and Linux
I see that you're already running version 8.10.16 so there's nothing more for you to do. 🙂
-Dave
1 -
Thank you, but I guess I didn’t ask my question very well. Were hackers able to access 1P user data BEFORE 1P was updated? If not, why not, and how do you know for certain? Thx.
0 -
The following would be the relevant portion of the security advisory in response to your question:
We have not received reports that this issue is exploited in 1Password apps.
-Dave
0
