Belgium's eID Authentication Opens Citizen Accounts to RCE

Summary

Severe vulnerabilities in a key browser extension have fully compromised the trust framework of Belgium's electronic ID system. This allows for Remote Code Execution (RCE) and opens citizen accounts to unauthorized access. The incident highlights broader security concerns surrounding the use and management of browser extensions.

Entities