Zero-day hole can pwn millions of LastPass users, all that's needed is a malicious site

http://www.theregister.co.uk/2016/07/27/zero_day_hole_can_pwn_millions_of_lastpass_users_who_visit_a_site/