
Shipped to the Browser: How FireCompass’s Agentic AI Penetration Testing Found API Keys and Signing Secrets Hardcoded Into Client-Side Code Across Ten Independent Programs
Every browser tab runs code the vendor chose to send to it, and everything in that code is visible to whoever opens developer tools, reads

