While evaluating the behavior of Bitwarden, a popular password manager browser extension, Flashpoint’s Vulnerability Research team noticed that embedded iframes in a web page were handled in an atypical manner. Well, things aren’t always easy and sometimes odd web designs require special treatment. They should be entered into the validated login form and nowhere else.
A browser extension that provides this functionality clearly needs to be aware of where it enters the saved user credentials. The latter allows you to conveniently log into your web accounts with only a few clicks. Password managers can have many features such as complex password generation, syncing across multiple devices, and integration into browsers as an extension. The idea behind a password manager is that it securely stores the credentials for many of your accounts and requires the user to only remember one password (or is configured to unlock via biometric authentication). This is also in beta, according to the company.īitwarden’s new release also comes as password management provider and competitor LastPass deals with the fallout from a breach in which a senior DevOps engineer’s home computer was targeted by an attacker to steal credentials.Password manager solutions are among many recommendations to keep access to your accounts secure. The beta release of Bitwarden Secrets Manager comes after the company acquired v, a tool that enables developers to integrate passwordless authentication and passkeys into their software. “Existing solutions have steep learning curves and are unwieldy for many teams,” the company says in its announcement. Bitwarden also cites another GitGuardian report found that 5 million credentials and other secrets get leaked on GitHub every year.
The company cites a GitLab report that found that 18% of projects hosted on GitLab were vulnerable to leaked secrets. The beta version is built on the same open-source, zero-knowledge end-to-end encryption foundation featured in the company’s password management offering.ĭuring the beta, users can explore early features of Bitwarden Secrets Manager, such as the ability to create and manage secrets and projects, SDK and CLI tools, GitHub Actions integration and others.
The Bitwarden Secrets Manager gives developers, DevOps and IT teams a single and convenient way to secure and manage secrets, the company says. Password manager provider Bitwarden is launching the open beta of Bitwarden Secrets Manager, a new tool designed to centrally secure and manage sensitive authentication credentials within privileged developer and DevOps environments.Īccording to the Santa Barbara, Calif.-based company, the new tool can help development teams working across applications and multi-cloud infrastructures dealing with distributed secrets such as API tokens, keys, passwords, credentials, certificates and more.
0 kommentar(er)
