Get the latest tech news
Google Chrome extensions remain a security risk as Manifest V3 fails to prevent data theft and malware exploitation
Businesses should look to implement stronger browser security measures
Recent research by SquareX has revealed how these rogue extensions can still bypass key security measures, exposing millions of users to risks such as data theft, malware, and unauthorized access to sensitive information. It often granted excessive permissions to extensions and allowed scripts to be injected without user awareness, making it easier for attackers to steal data, access sensitive information, and introduce malware. Malicious extensions built on MV3 can still bypass security features and steal live video streams from collaboration platforms like Google Meet and Zoom Web without needing special permissions.
Or read this on r/technology
