Get the latest tech news
Password managers vulnerable: 40 million users at risk of stolen data
Most password managers are secure, but one common vulnerability makes it possible for hackers to steal your data anyway.
The attack usually goes unnoticed as users simply close the affected page and receive no warning that someone has gained access to their password manager. Incidentally, not only passwords but also other types of sensitive data can be intercepted in this way, including stored credit card details, names, addresses, telephone numbers, and more, which could then be used for phishing attacks. Editor’s note, 8/28/2025: Clarified which services have issued patches to address this clickjacking vulnerability, and the remaining threat if an update is not yet applied.
Or read this on r/technology