---
id: 4752
title: "Ultimate double-clickjacking exploit, novel HTTP/2 request tunnelling techniques, when encryption makes matters worse – ethical hacker news roundup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/news/double-clickjacking-request-tunnelling-encryption"
published_at: "2025-06-20 11:43"
tags: ["web-security", "http2", "roundup", "double-clickjacking", "http-request-tunnelling", "openpgpjs"]
phying_url: "https://phying.com/item/4752"
lang: en
---

# Ultimate double-clickjacking exploit, novel HTTP/2 request tunnelling techniques, when encryption makes matters worse – ethical hacker news roundup

## Summary

Roundup: an 'ultimate' double-clickjacking PoC with a fake Cloudflare Captcha and Flappy Bird, underrated HTTP request tunnelling attacks, and a critical OpenPGP.js signature spoofing flaw.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2025-06-20 11:43
- **Original:** https://www.yeswehack.com/news/double-clickjacking-request-tunnelling-encryption
- **Phying News:** https://phying.com/item/4752