Tag

#Browser Security

2 articles covering Browser Security across campaign analysis, detection engineering, and defender tradecraft.

Coverage

2 entries

Field Analysis

Dual UseTradecraft LabsOct 6, 202612 min read

ClickFix Is Engineering Its Way Out of the Run Dialog

The Windows Run box truncates at roughly 260 characters, and that limit has shaped ClickFix tradecraft since it appeared. Three developments this quarter — browser cache smuggling, Google Sheets C2, and blockchain-hosted payloads — are all solutions to the same constraint.

By PhishPond Desk

Field Analysis

Blue TeamDetection & ValidationMay 31, 20267 min read

Chrome Binds the Cookie: A Defender's Brief on Device Bound Session Credentials

Chrome's Device Bound Session Credentials, now generally available and on by default for Workspace, tie session cookies to a device's security chip so a stolen cookie is useless off the machine it came from. Here is what it stops and what it does not.

By PhishPond Desk

#Browser Security

Coverage

Browse Other Tags