SquareX Discloses “Browser Syncjacking,” a New Attack Technique that Provides Full Browser and Device Control, Putting Millions at Risk

SquareX discloses a new attack technique that shows how malicious extensions can be used to completely hijack the browser, and eventually, the whole device. PALO ALTO, Calif., Jan. 30, 2025 (GLOBE NEWSWIRE) -- Browser extensions have been under the spotlight in enterprise security news recently due to the wave of OAuth attacks on Chrome extension developers and data exfiltration attacks. However, until now, due to the limitations browser vendors place on the extension subsystem and extensions, it was thoug ...