Attack the Glass (ATG)
Supply Chain Injection Vulnerabilities on Client-Side Rendering
A self-funded research publication is now available: the publication shows how the vulnerability exploits a weakness in existing cybersecurity architectures, through a supply chain injection on client-side rendering. It is published to raise awareness in industry, in government, and among researchers of a significant threat of deception, disinformation, manipulation, and adversarial influence. Most of the screens around us are dynamic, created in the instant before they are shown to you, from code, media, and data supplied by other companies. Anyone who controls one of those assets can quietly change what your screen shows and what it does, and every security tool in use today will report that all is well.