Safari’s Fullscreen Fumble: Apple’s Browser Leaves Users Vulnerable to Sneaky BitM Attacks
Safari users, beware! A weakness in Apple’s browser lets hackers use the fullscreen browser-in-the-middle technique to snag your passwords. Safari forgets to sound the “fullscreen alert” alarm, making it easier for cyber tricksters to pull a fast one on you. Remember, not all fullscreen moments are created equal—keep an eye out!
Hot Take:
Oh Apple, you had one job! Safari users might just need a safari hat to shield them from these cyber lions. While Apple is busy making their devices shinier, hackers are busy exploiting their lack of fullscreen alerts. It’s like giving a free pass to the world’s worst magic show, where your passwords disappear faster than you can say “fullscreen API!”
Key Points:
- Safari’s lack of proper alerts makes fullscreen BitM attacks more convincing.
- Fullscreen API is being exploited to hide browser guardrails.
- SquareX researchers identified the vulnerability and reported it to Apple.
- Apple’s response was a “wontfix,” claiming their animation is sufficient.
- Users are tricked into entering credentials on attacker-controlled windows.
Already a member? Log in here