1 link tagged with all of: vulnerabilities + api + privacy + security
Click any tag below to further narrow down your results
Links
SquareX's research reveals a concealed MCP API in the Comet browser that allows extensions to execute commands and access user devices without permission. This breach of security principles raises concerns about potential exploitation and the lack of transparency surrounding embedded extensions.