June 28, 2026 · 4 min read
An Ad Blocker With 10 Million Users Was Carrying a Hidden 'Inject Anything' Switch
A popular Chrome ad blocker wasn't hacked. It was built with a dormant code path that could run any script on any site you visit, flippable from a server with nobody reviewing it. Here's how to check your own extensions today.
Read more →
