UNC6692 - Native Host Bridge Escape

Ibrahim Saud@tektrix

•updated Jun 20, 2026•1•0•6

Identifies the browser extension utilizing the native messaging bridge to launch execution commands outside the sandbox, specifically looking for Microsoft Edge processes initiating commands containing 'open_native_messaging'.