Windows attack can steal your logged-in username and password

The flaw, which allows a malicious website to extract user passwords, is made worse if a user is logged in with a Microsoft account.

source Latest blogs for ZDNet http://ift.tt/2as7m8U