SquareX's presentation highlighted the alarming ability of malicious browser extensions built on Manifest V3 to steal sensitive data like video streams and site cookies without special permissions.
The research revealed that rogue extensions can manipulate user actions, such as adding collaborators to private GitHub repositories, without detection, showcasing a severe security vulnerability.
SquareX's findings emphasize that even with MV3's security updates, malicious extensions continue to exploit loopholes, putting users at enormous risk.
The scale of the problem is significant; a Stanford report suggests 280 million malicious Chrome extensions were installed recently, indicating a critical need for enhanced security measures.
Collection
[
|
...
]