Denmark has quietly ended its Collabora pilot, halting a major effort to replace Microsoft software and achieve greater technological independence
Summary
This article recounts Orange Tsai's Pwn2Own Berlin 2026 demonstration of a logic-only browser exploit chain in Microsoft Edge, aimed at achieving a sandbox escape without memory corruption or AI. It outlines multiple bugs and Windows feature interactions (navigation throttles, OneAuth, protocol handlers, and UXSS techniques) and discusses broader implications for browser security, defense-in-depth, and the evolving attack surface.