Cyberhaven’s Chrome extension security incident and what we’re …
Dec 27, 2024 · For customers running version 24.10.4 of our Chrome extension during the affected period (December 24-26, 2024), we strongly recommend: Confirm if you have any browsers running the Cyberhaven Chrome extension version 24.10.4 and force an update to version 24.10.5 (currently available in the Chrome Web Store) or newer.
Cyberhaven’s preliminary analysis of the recent malicious Chrome …
6 days ago · This malicious extension (24.10.4) was essentially based on a clean prior version of the official Cyberhaven Chrome extension. The attacker made a copy of the clean extension and added some malicious code to create a new malicious extension. This extension was uploaded to the Chrome webstore and replaced the clean official Cyberhaven Chrome ...
25 Chrome extensions with over 2M users breached: hackers are …
4 days ago · The attack is ongoing. The indicators of compromise provided by Cyberhaven link the hack to a widespread campaign. According to a report by Secure Annex, hackers are targeting Chrome extension developers across multiple companies to obtain sensitive information from websites like Bank of America, American Express, Zoom, 23andme, and more.. By comparing the code and URLs, the firm’s ...
Cyberhaven breach caused by malicious Chrome extension
1 day ago · On Friday, Dec. 27, Cyberhaven released a statement about the breach. This caused a shockwave in the cybersecurity community. More parties affected. Following the attacking activity on Cyberhaven, further investigation was conducted, discovering that dozens of other popular Chrome extensions also contained the same malicious code.
Cyberhaven Chrome Extension Hacked to Inject Malicious Scripts
Dec 27, 2024 · Cyberhaven confirmed that versions of the extension hosted outside the Chrome Web Store, such as those for Firefox or Edge, were not affected. Cyberhaven has engaged federal law enforcement and cybersecurity firm Mandiant to investigate the breach further.
New details reveal how hackers hijacked 35 Google Chrome …
3 days ago · Although initial reports focused on Cyberhaven's security-focused extension, subsequent investigations revealed that the same code had been injected into at least 35 extensions collectively used ...
Cyber firm’s Chrome extension hijacked to steal user passwords
Dec 27, 2024 · Data-loss prevention startup Cyberhaven says hackers published a malicious update to its Chrome extension that was capable of stealing customer passwords and session tokens, according to an email ...
Cybersecurity firm's Chrome extension hijacked to steal users' data
Dec 27, 2024 · Apart from upgrading to the latest version, users of the Cyberhaven Chrome extension are recommended to revoke passwords that aren’t FIDOv2, rotate all API tokens, and review browser logs to ...
Hackers hijacked legitimate Chrome extensions to try to steal data
6 days ago · Cybersecurity startup Cyberhaven’s Chrome extension was hijacked to steal cookies and authentication data with a hacked update uploaded on Christmas Day.
Hackers hijack a wide range of companies' Chrome extensions, …
Dec 27, 2024 · Hackers have compromised several different companies' Chrome browser extensions in a series of intrusions dating back to mid-December, according to one of the victims and experts who have...
- Some results have been removed