CIRCLE WITH A DOT

@cyberseckyle yup. I'm spreading that message around now at work. It's scary simple to dump process memory in your own user space. That's it. That's all an exploit needs to do.

The cybersecurity researcher posted something about this on X yesterday. "Rønning clarifies that Edge decrypts every credential at startup, regardless of whether you visit a site using those credentials. This doesn't mean that one can simply access those passwords with little know-how, though. A user needs administrative access to a terminal server, which is already a major breach on a computer, but from here, "they can access the memory of all logged‑on user processes."PC Gamer: Microsoft Edge saves passwords in cleartext 'by design' and researchers argue 'this turns into a credential harvest' on shared PCs https://www.pcgamer.com/hardware/microsoft-edge-saves-passwords-in-cleartext-by-design-and-researchers-argue-this-turns-into-a-credential-harvest-on-shared-pcs/ #Microsoft #infosec #Edge