Password manager Dashlane disclosed a brute-force attack compromising 20 encrypted user vaults, raising security concerns.