Edge Password Exposure, BitLocker Bypass and AI-Enabled Threats

Summary

Security Now examines Microsoft's response to Edge password exposure, a local BitLocker bypass and Google's findings on adversarial uses of AI, alongside authentication and disk-encryption tradeoffs.

Key points

• Microsoft said it would stop Edge from loading saved passwords into memory at startup, after researcher Tom Running demonstrated the exposure and released a proof of concept.
• The proof of concept could extract credentials from the current user's Edge process without administrator privileges; administrator privileges allowed access to other users' processes.
• Steve Gibson recommends keeping one-time password secrets separate from saved passwords to preserve an additional layer of protection.
• Researchers confirmed that the published Yellow Key exploit can access a TPM-only BitLocker-protected drive on its original device through Windows Recovery. A claimed bypass of TPM plus PIN was not demonstrated publicly.
• Google's threat intelligence group reported a zero-day exploit it believes was developed with AI, as well as AI-assisted malware development and supply-chain attacks targeting AI environments.
• The discussion also notes privacy providers' opposition to Canada's proposed lawful-access Bill C-22.

People

Malware

Vendors