Explainer: three ways AI agents already control employee browsers
Debugging protocols, in-browser agents and WebMCP can act inside signed-in sessions that logs may attribute to the user.
1
Stories per day · 30 days
Relatedauthorization-bypass1backup1browser-agents1chrome-extensions1privilege-escalation1prompt-injection1veeam1webmcp1
3 stories, newest first · one card per story
Stories tagged #cdp
Veeam patches critical Backup & Replication authorization bypass
Unauthenticated attackers can bypass CDP Coordinator checks; fixed builds are 13.1.2.57 and 13.0.3.63, with no exploitation reported.
Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers
SpecterOps released CDP-Enable-BOF, a Beacon Object File that enables Chrome DevTools Protocol in live Chrome or Edge processes on Windows for session hijacking.