browser extension
Coverage of browser extension in the Nexus archive.
- Belgium's eID Authentication Opens Citizen Accounts to RCE
Belgium's eID Authentication system was compromised, opening citizen accounts to RCE vulnerabilities. The incident revealed that the underlying trust framework for the electronic ID system was fully breached by severe flaws found in a key browser extension, which highlights broader problems with extensions generally.
- Threat actor uses Microsoft Teams to deploy new “Snow” malware
A threat group named UNC6692 is using social engineering to deploy a new malware suite called 'Snow' through Microsoft Teams. The malware includes a browser extension, a tunneler, and a backdoor.
- Why does web3 require on chain login?
The article proposes using an ESP32-based USB device for decentralized login via a browser extension, arguing against web3's reliance on on-chain logins and external authentication systems. It criticizes the need for fees and server dependencies in current login methods.
- Show HN: Hormuz Havoc, a satirical game that got overrun by AI bots in 24 hours
A satirical browser game called Hormuz Havoc was quickly exploited by AI bots after its source code was exposed, leading to a series of security patches and a split leaderboard between humans and AI-assisted players. The developer moved game logic to the server side to mitigate bot exploits, highlighting vulnerabilities in client-side code and session token replay attacks.