…make sure that you check carefully before installing any on your systems: Malicious extension lets attackers control Google Chrome remotely (bleepingcomputer.com) Malicious extensions also exist for all the other browsers out there not just Google Chrome.
Spell checkers leaking passwords to Microsoft and Google!
Here is a security concern that you may not have thought of. The enhanced (not the basic one the products ship with) spell check functionality in Microsoft Edge and Google Chrome sends information back and forth between your machine and their servers but it appears this information can include personally …
Continue reading “Spell checkers leaking passwords to Microsoft and Google!”
Another Google Chrome zero-day patch released
I have just spotted this – it is Saturday – but I thought I would put it quickly, up as many people depend on Google Chrome for shopping, banking etc: Google Chrome emergency update fixes new zero-day used in attacks (bleepingcomputer.com) This impacts the Windows, Mac, and Linux versions, is …
Continue reading “Another Google Chrome zero-day patch released”
Google Chrome clipboard issues – do you know if one of your team is using an unpatched version?
This is an accidental flaw introduced into the latest version of Chrome, which Google is fixing. Google Chrome bug lets sites write to clipboard without asking (bleepingcomputer.com) The issue with websites being able to write to the system clipboard, is that clipboard often holds sensitive information during a website interaction …
Web browser extensions a great idea for functionality but also a cyber security risk – what can you do?
Most browsers offer the option of adding extensions that will add functionality to the browser, however, of course, the threat actors exploit these to carry out various cyber attacks: Chrome extensions with 1.4 million installs steal browsing data (bleepingcomputer.com) Here are the extensions that the McAfee researchers discovered: Netflix Party (mmnbenehknklpbendgmgngeaignppnbe) …
Google Chrome exploited zero-day vulnerability fixed
Google fixes fifth Chrome zero-day bug exploited this year (bleepingcomputer.com)
Stealing emails undetected using Chrome extensions
The malicious extension has been called SHARPEXT by researchers at Volexity and impacts the Chromium-based web browsers, Chrome, Edge, and can steal email from Gmail. Cyberspies use Google Chrome extension to steal emails undetected (bleepingcomputer.com)
