The Latest Breaking News from SquareX

Microsoft finally ends using SMS codes for account sign-in — with passkeys officially taking over

Microsoft believes that the future of authentication is passwordless, secure, and user-friendly.

TechRadar · May 19

Perplexity responds to Comet browser vulnerability claims, argues "fake news"

Researchers said Comet can be abused to execute local commands, but Perplexity claims the research is "entirely fake".

TechRadar · Nov 23, 2025

Perplexity's Comet AI browser may have some concerning security flaws which could let hacker hijack your device

SquareX says it found a 'hidden API' in the Comet browser, capable of executing local commands.

TechRadar · Nov 20, 2025

Malicious "polymorphic" Chrome extensions can mimic other tools to trick victims

A malicious browser extension can assume the appearance of another one, and disable it at the same time, experts warn.

TechRadar · Mar 7, 2025

Google Chrome at risk from shape-shifting browser extensions — how to stay safe

SquareX has devised a new attack method that allows malicious browser extensions to impersonate legitimate ones for password managers, crypto wallets and more.

Tom’s Guide · Mar 6, 2025

A new Chrome browser highjacking attack could affect billions of users - here's how to fight it

There's a new highjacking attack that could take over your Chrome browser and steal all your data - here's how to keep your computer safe.

TechRadar · Jan 31, 2025

Billions of Chrome users at risk from new browser-hijacking Syncjacking attack — how to stay safe

Hackers have devised a new attack method that uses a seemingly harmless Chrome extension to take over devices and steal sensitive user data.

Tom’s Guide · Jan 30, 2025

"Browser extensions are a blind spot for EDR/XDR, and SWGs have no way to infer their presence": Google Chrome's new Manifest V3 framework, touted as private and secure, might be a breeding ground for phishing scams

Google transitioned Chrome's extension support from the Manifest V2 framework to V3 over privacy and security concerns. However, new research shows malicious browser extensions can bypass the new framework's security measures, leaving users susceptible to phishing scams.

Windows Central · Nov 11, 2024

Google Chrome extensions remain a security risk as Manifest V3 fails to prevent data theft and malware exploitation

Research reveals ongoing vulnerabilities in Chrome extensions, highlighting risks of data theft and malware under Manifest V3.

TechRadar · Nov 10, 2024