Microsoft backpedals: Edge to stop loading passwords into memory

Microsoft Edge was reported to decrypt and keep saved passwords in process memory at startup, enabling a researcher to produce a proof-of-concept that can dump stored credentials (requiring Administrator privileges to access other users' processes). After initially calling the behavior "by design," Microsoft announced a defense-in-depth change and is rolling out a fix (already in Canary) to stop loading saved passwords into memory on startup across supported channels.