SPYING ON SCREEN ACTIVITY USING CHROMIUM BROWSERS

Summary from the TLDR InfoSec newsletter

By default, Chromium-based browsers require users to consent to screen sharing and choose a screen to share to allow websites to capture a user's screen. However, these security researchers developed an attack that uses the `-- auto-select-desktop-capture-source` command line flag to enable screen sharing automatically. This attack can be chained with a headless browser or a small browser launched off-screen to hide the window from a user.