You have misunderstood the threat. When an attacker gains a foothold in a corporate environment, they will immediately try to find any accessible credentials to assist in lateral movement.
If the user's passwords to the rest of the corporate systems are sitting unprotected in a browser password store, it is a gold mine.
Yes, they should have 2fa and single sign on and so on, but many places don't. The article isn't terrible, it's just pointing out something in browsers that works ok for home users but puts businesses at some risk.
If the user's passwords to the rest of the corporate systems are sitting unprotected in a browser password store, it is a gold mine.
Yes, they should have 2fa and single sign on and so on, but many places don't. The article isn't terrible, it's just pointing out something in browsers that works ok for home users but puts businesses at some risk.