Password Managers Vulnerable to Vault Compromise Under Malicious Server

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vulnerabilities in Password Managers Expose User Credentials Researchers from ETH Zurich and Università della Svizzera italiana identified vulnerabilities in four cloud-based password managers: Bitwarden, LastPass, Dashlane, and 1Password. These flaws could allow attackers to view and alter passwords stored in user vaults, undermining the security claims of these services, particularly regarding zero-knowledge encryption. Users of these password managers are affected by the potential exposure of their credentials. 16 sources 37