US EditionApple Safari Exposes Users to Fullscreen Browser-in-the-Middle Attacks
- SquareX published research on May 29, 2025, exposing a Safari-specific fullscreen Browser-in-the-Middle attack vulnerability in Palo Alto, California.
- This flaw arises from Safari’s Fullscreen API lacking clear visual indicators, allowing attackers to hide malicious URLs and create convincing BitM attacks.
- The attack uses a remote attacker-controlled browser pop-up in fullscreen mode to trick users into entering credentials on fake login pages, bypassing current detection methods.
- SquareX noted that Fullscreen BitM attacks are especially effective on Safari because the browser does not provide a clear indication when entering fullscreen mode, and Apple has stated they do not intend to resolve this vulnerability.
- This vulnerability suggests enterprises must adopt browser-native security measures, as existing solutions and EDRs fail to detect such advanced, imperceptible attacks.
Insights by Ground AI
Does this summary seem wrong?
13 Articles
13 Articles
All
Left
Center
1
Right
1
Fullscreen BitM Attack Discovered by SquareX Exploits Browser Fullscreen APIs to Steal Credentials in Safari - Tech Startups
PALO ALTO, California, 29th May 2025, CyberNewsWire The post Fullscreen BitM Attack Discovered by SquareX Exploits Browser Fullscreen APIs to Steal Credentials in Safari first appeared on Tech Startups.
Coverage Details
Total News Sources13
Leaning Left0Leaning Right1Center1Last UpdatedBias Distribution50% Center, 50% Right
Bias Distribution
- 50% of the sources are Center, 50% of the sources lean Right
50% Right
C 50%
R 50%
Factuality
To view factuality data please Upgrade to Premium
Ownership
To view ownership data please Upgrade to Vantage
