Modern Browser Attacks: Why Perimeter Tools Are No Longer Enough
Summary: The article states that browsers now handle proprietary data, credentials, and business workflows, while legacy tools such as firewalls, antivirus, and EDR were not designed to defend them. It cites CVE-2025-6554 and CVE-2025-10585 as vulnerabilities exploited in the wild days after disclosure, and describes session and SSO token hijacking through malicious JavaScript injected via compromised ad networks or shadow IT that bypasses MFA even as passwords change.
What you should know: Attackers who hijack browser sessions and tokens keep access even after passwords are changed, and the article says extension traffic, in-browser scripts, and stolen session tokens are essentially invisible to EDR and SWG - so the controls most enterprises count on cannot see the activity happening inside the browser.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-10585CVE-2025-6554
- Related