Researchers just found a new, potentially dangerous flaw within Bitwarden, an open-source passwordmanager.
Researchers have just found a flaw within Bitwarden, a popular password manager. If exploited, the bug could give hackers access to login credentials, compromising various accounts.
The potential security risk lies within Bitwarden’s autofill feature. It lets inline frames access your login details, and if said iframes are compromised, then so are your credentials. An iframe is an HTML element that allows developers to embed a different webpage within the page you’re currently on. They’re often used for the purpose of embedding ads, videos, or web analytics.
In its report, Flashpoint said: “While the embedded iframe does not have access to any content in the parent page, it can wait for input to the login form and forward the entered credentials to a remote server without further user interaction.” “Some content hosting providers allow hosting arbitrary content under a subdomain of their official domain, which also serves their login page. As an example, should a company have a login page at https://logins.company.tld and allow users to serve content under https://.company.tld, these users are able to steal credentials from the Bitwarden extensions,” Flashpoint explained.
Malaysia Latest News, Malaysia Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Video goes behind the scenes of The Last of Us episode 8 | Digital TrendsHBO has released a new video that offers insight from the cast and creators of The Last of Us into season 1, episode 8, and what it means for Ellie.
Read more »
The 7 best Hitchcockian thrillers ever, ranked | Digital TrendsFrom StevenSpielberg's Jaws to JordanPeele's GetOut, these movies are the best Hitchcockian thrillers ever made.
Read more »
Sonos had a come-to-Jesus moment over Bluetooth | Digital TrendsIn an interview with Digital Trends, Sonos CEO Patrick Spence explains why the company changed its tune on Bluetooth, and what might be in store for future products.
Read more »
Nvidia fixed a problem that may have slowed down your CPU | Digital TrendsA recent Nvidia graphics driver was slowing down the CPU, but Nvidia was quick to come up with a hotfix. Here's how to get it.
Read more »
Troy Baker shares his reactions to HBO's The Last of Us | Digital TrendsThe original Joel, Troy Baker, offers his thoughts on Pedro Pascal's take on the character and more from HBO's adaptation of The Last of Us.
Read more »
Google I/O 2023 is happening on May 10 with an in-person event | Digital TrendsIt's official! Google I/O 2023 is taking place on May 10 with an in-person event. Here's what we know so far.
Read more »