🔧 Why We Don't Use Browser Extensions: The Clickjacking Problem

At DEF CON 2025, security researchers disclosed a clickjacking vulnerability affecting the browser extensions of 1Password, Bitwarden, and LastPass. The attack allows malicious websites to steal autofilled credentials by overlaying invisible elements on password fields.

Here's what happened, why browser extensions are inherently vulnerable to...