1Password, Bitwarden, LastPass, Enpass, iCloud Passwords, and LogMeOnce remain vulnerable to zero-day clickjacking vulnerabilities disclosed at DEF CON. Vendors downplayed or ignored the issue. Socket has filed a CVE to ensure these risks are formally tracked. socket.dev/blog/passwor...
socket.devResearcher Exposes Zero-Day Clickjacking Vulnerabilities in ...Hacker Demonstrates How Easy It Is To Steal Data From Popular Password Managers
5 reposts5 likes