A critical vulnerability in the Chromium browser engine, which powers popular browsers like Google Chrome and Microsoft Edge, has been exposed, allowing attackers to execute malicious JavaScript code even after a browser restart. This flaw, initially reported by researcher Lyra Rebane over three years ago, enables hackers to hijack browsers for large-scale attacks, such as distributed denial-of-service assaults or cryptocurrency mining operations1. The vulnerability's details were recently made public, although the bug report was subsequently closed. The fact that this issue remains unpatched poses significant risks to users, as it can transform their browsers into bots under the control of malicious actors. This oversight matters to security practitioners because it underscores the importance of closely monitoring the security of widely-used browser engines and assessing the potential impact on their own environments.