Millions of users of popular password managers—including LastPass, 1Password, Bitwarden, Enpass, iCloud Passwords, and LogMeOnce—are at risk due to recently discovered clickjacking vulnerabilities in their browser extensions. Research presented at DEF CON 33 demonstrates that attackers can invisibly overlay web…