LastPass fixes a major exploit – CNET