BITWARDEN HEIST - HOW TO BREAK INTO PASSWORD VAULTS WITHOUT USING PASSWORDS

Summary from the TLDR InfoSec newsletter

Bitwarden's Windows Hello implementation had an unexpected consequence - allowing remote theft of credentials without knowing the password or requiring biometric authentication. The issue enabled accessing Bitwarden vaults on compromised workstations without end-user interaction. It has since been fixed in v2023.4.0.