Marek Tóth's 2025 research showed password managers are vulnerable even without a vault breach. This new clickjacking attack ...