New DoubleClickjacking attack exploits double-clicks to hijack accounts

DoubleClickjacking is a newly described UI-redressing technique that abuses the timing of double-clicks and rapid overlay/window switching to cause a victim's second click to land on an exposed control of a legitimate site (e.g., authorizing OAuth apps, accepting MFA prompts, approving web3 transactions). The researcher provided proof-of-concepts against major services, noted the technique bypasses common clickjacking protections, and proposed mitigations (gesture-gated sensitive controls and a potential HTTP header to limit rapid context switching).