"Hey everyone, I just got word about a 0-day exploit in a super popular browser extension (let's not name names yet) that's been used to steal credentials from thousands of users. From what I've gathered, it's a sophisticated phishing tactic that bypasses even 2FA. Does anyone have more info on this, or know how to stay safe?"