1 post
Sep 29, 2026
The Cyberhaven extension compromise showed how one phished developer account turns a trusted browser extension into a session-token thief — and how to defend against it.