New "DoubleClickjacking" Exploit Bypasses Clickjacking Protections to Enable Account Takeover

Threat hunters have disclosed a new "widespread timing-based vulnerability class" that leverages a double-click sequence to facilitate clickjacking attacks and account takeovers in almost all major websites.