Edge Retires Master Password Feature
NEOSEC enrichment — no mirror of the original source
On Thursday, June 4, 2026, Microsoft retired the master password feature in the password manager of its Edge browser. Instead, Edge will replace the password requirement with Windows Hello, which uses PIN, fingerprint, or facial recognition
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesMore on Password
Other advisories
- Not ratedosv:CLEANSTART-2024-YV49525When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog
- Not ratedosv:CLEANSTART-2024-VZ65902attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, passwo...
- Not ratedosv:CLEANSTART-2024-TJ47241It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords
- Not ratedosv:CLEANSTART-2024-BK15179In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue
- Not ratedosv:CLEANSTART-2024-VN57998slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash
- Not ratedosv:CLEANSTART-2024-DH33215use of hard-coded password vulnerability may allow authentication abuse
- Not ratedosv:CLEANSTART-2024-UP63455design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs)
- Not ratedosv:CLEANSTART-2025-PI21590LibreOffice supports the storage of passwords for web connections in the user’s configuration database
Other news entries
- Alpine Linux rebuilds GitLab after attempted RCE attackNewsBleepingComputer
- Passkeys Are Better Than Passwords. But They Are Not Enough.NewsSecurityWeek
- Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposedBreachpwn.watch
- ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesNewsThe Hacker News
- Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-netNewsSecurityWeek
- Admin dropped the F-bomb in a password to show hackers who was really 1337NewsThe Register — Security
- AO3 (Archive of Our Own) down for 2-4 weeks after security incident; user database theft not ruled outBreachpwn.watch
- Unexplained DreamHost Incident Prompts Email, FTP Password ResetsNewsSecurityWeek
Source: https://www.techradar.com/
ID