Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

Back Thehackernews

Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

Thehackernews • August 14, 2026

Share: View original

AI can find and chain vulnerabilities in minutes. This session gives you a practical roadmap to strengthen visibility, response, and remediation.

AI is helping teams ship code 10–50× faster. This session shows how to keep security from falling behind.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New CDP Attack Targets Live Browser Sessions on Windows A recently disclosed post-exploitation technique allows attackers to hijack live sessions in Google Chrome and Microsoft Edge after compromising Windows systems. This method leverages the Chrome DevTools Protocol (CDP) to access authenticated sessions without needing to steal cookies. The attack requires prior code execution on the victim's machine, making it particularly dangerous for users with active browser sessions. Affected users include anyone running these browsers on compromised Windows systems. The technique exposes sensitive data, including browser activity, WebAuthn interactions, and extensions, while bypassing existing protections against cookie theft. The full scope of the attack's impact is still being assessed, but it poses a significant risk to user security. Current mitigation strategies are not detailed in the articles, indicating an urgent need for awareness and defensive measures. 2 sources 65

Extracted Entities

Attack Types (1)

Man-in-the-Middle

Platforms (1)

Tools (1)

Chrome DevTools