Get the latest tech news
Widespread cyberattack targets Google Chrome extensions, compromises 2.6 million devices | The incident highlights the often overlooked security risks associated with browser extensions
The attack, which began on Christmas Eve, exploited a vulnerability in the Chrome Web Store's developer authentication system. Attackers used sophisticated spear-phishing techniques to gain access to...
"Public reports suggest this attack was part of a wider campaign targeting Chrome extension developers across a wide range of companies." A similar campaign targeted both Chrome and Firefox extensions in 2019, compromising four million devices, including those within networks of major companies like Tesla, Blue Origin, and Symantec. Tuckner suggests one potential solution: organizations could implement a browser asset management list, allowing only selected extensions to run while blocking all others.
Or read this on r/technology
