JUST IN: Hackers stole over $5 million from LastPass users just before Christmas, leading to urgent warnings from Security Alliance to transfer funds.