The not-so-dirty secret about web browsers is that browser extensions can be a major security weakness. We last wrote about this issue with malicious extensions in December. But the problem with extensions deserves further treatment, especially as they can combine some very clever supply chain and obfuscation methods to make these kinds of attacks harder to detect and defend.
