Edge Retires Master Password Feature
NEOSEC enrichment — no mirror of the original source
On Thursday, June 4, 2026, Microsoft retired the master password feature in the password manager of its Edge browser. Instead, Edge will replace the password requirement with Windows Hello, which uses PIN, fingerprint, or facial recognition
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesMore on Password
Other advisories
- MediumCVE-2026-62361listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials
- CriticalCVE-2026-59105Jumis (formerly Tildes Jumis) creates and uses a Microsoft SQL Server login named ##Tilde_JumisAdmin## whose password is derived deterministically from a sin…
- HighCVE-2026-123158Alpine Linux sshd password authentication bypass lets anyone log in to key-only accounts (CVE-2026-123158)
- Highpwn_watch:claude-code-settings-local-json-secrets-exposure-nov-2026Claude Code "don't ask again" file leaks passwords and keys: 1,122 public copies of .claude/settings.local.json on GitHub hold secrets
- HighCVE-2026-19877INFINITT ULite share-link passwords are brute-forceable; pre-auth XSS fixed in BN50
- Not ratedosv:CVE-2026-121539miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control
- Not ratedosv:CVE-2026-121535miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication
- Not ratedosv:CVE-2026-55186Silverstripe MFA: Can bypass MFA during password reset flow
Other news entries
- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubNewsThe Hacker News
- Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on HoneypotNewsThe Hacker News
- OpenSSH Rushes Patches for ‘SSHole’ Authentication BypassNewsSecurityWeek
- Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key ServicesNewsThe Hacker News
- OpenSSH flaw lets attackers access password-disabled accounts on some Linux systemsNewsCSO Online
- Technical University of Munich (TUM) IT security incident: myTUM passwords stolen, TUMonline taken offlineBreachpwn.watch
- Get root on a musl Linux system by slamming it with an overly long passwordNewsThe Register — Security
- OpenSSH flaw lets attackers log into password-disabled Linux accountsNewsBleepingComputer
Source: https://www.techradar.com/
ID