Chrome DevTools Protocol Technique Enables Session Hijacking on Windows Browsers
Researchers detail post-exploitation method leveraging CDP in Chrome and Edge

Key Takeaways
- A post-exploitation technique leveraging the Chrome DevTools Protocol (CDP) allows session hijacking on Windows versions of Chrome and Edge.
- The method requires that an attacker already has code execution on the target host.
- No user interaction is needed once the attacker has local access to exploit the technique.
Related Security News

Former US Air Force Members Sentenced to Prison for Business Email Compromise Scams
Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. The sentencing, reported by BleepingComputer in September 2026, concluded a federal case targeting individuals who abused their military backgrounds to conduct financially motivated email fraud. The attacks spanned multiple years prior to sentencing, though specific victim counts and total financial losses were not detailed in the reporting. The case underscores the legal consequences of using military credentials and training for cyber-enabled fraud.




