Is there a plan for how this new exploit will be addressed? Thanks. https://thehackernews.com/2025/08/dom-based-extension-clickjacking.html
Hello, @weskimcom
Welcome to the LastPass Community.
We take this and all threats very seriously. We listen to our customer feedback and are actively monitoring all discussions on this topic and are making additional updates to protect your security.
A new background security rule is in flight and will be included in an upcoming browser extension release that is expected in the next version 4.146.6 by August 29th. This enhancement detects the most common clickjacking tactic which employs highjack elements hidden with ‘0 opacity’ and will block autofilling when detected on a website. Note, not all variants of clickjacking attacks rely on opacity, so we’re continuing to evaluate broader protections as well.
