SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk

SquareX warns of emerging “browser-native ransomware” that bypasses traditional EDR by exploiting browser-based identity and SaaS access without file downloads, potentially using malicious OAuth permissions and AI agents to reset passwords, exfiltrate/delete cloud data, and impact shared drives enterprise-wide. The release urges adoption of browser-native defenses (BDR) and references prior SquareX research such as Browser Syncjacking and Polymorphic Extensions, with a link to further details.