⌘ K
Topic
vulnerability
2 stories about vulnerability—and the choices behind the technology we make.
← Back to all storiesWhat a forgotten master password costs you, and who pays for it
CVE-2026-75135 let a local attacker recover a password manager's master password from memory. The bug wasn't sloppy code — it was the price of promising to help you when you forget.
Clickjacking steals passwords. Here's how Vauz stops it.
Researchers showed that one invisible click can drain a password manager's autofill. Vauz 1.4.2 answers with an approval prompt the page cannot draw over — Touch ID, or your V-Key.