Marek Tóth's 2025 research showed password managers are vulnerable even without a vault breach. This new clickjacking attack overlays elements on your webpage, and when you attempt to close a pop-up, ...