Researcher finds LastPass 2FA could become 1FA

Not only was LastPass using a password hash in its two-factor authentication scheme, but 2FA could be disabled by an attacker, a security researcher has found.