Cyberhaven’s Chrome extension security incident and what we’re …
Dec 27, 2024 · For customers running version 24.10.4 of our Chrome extension during the affected period (December 24-26, 2024), we strongly recommend: Confirm if you have any browsers running the Cyberhaven Chrome extension version 24.10.4 and force an update to version 24.10.5 (currently available in the Chrome Web Store) or newer.
Cyberhaven’s preliminary analysis of the recent malicious Chrome …
Dec 28, 2024 · This malicious extension (24.10.4) was essentially based on a clean prior version of the official Cyberhaven Chrome extension. The attacker made a copy of the clean extension and added some malicious code to create a new malicious extension. This extension was uploaded to the Chrome webstore and replaced the clean official Cyberhaven Chrome ...
Cyberhaven Chrome Extension Hacked to Inject Malicious Scripts
Dec 27, 2024 · Cyberhaven, a leading provider of data loss prevention (DLP) solutions, disclosed a significant security breach involving its Chrome extension. On December 24, 2024, a targeted cyberattack compromised an administrator account, allowing attackers to publish a malicious update (version 24.10.4) to the Chrome Web Store.
Cyberhaven breach caused by malicious Chrome extension
4 days ago · On Friday, Dec. 27, Cyberhaven released a statement about the breach. This caused a shockwave in the cybersecurity community. More parties affected. Following the attacking activity on Cyberhaven, further investigation was conducted, discovering that dozens of other popular Chrome extensions also contained the same malicious code.
Cybersecurity firm's Chrome extension hijacked to steal users' data
Dec 27, 2024 · One attack was disclosed by Cyberhaven, a data loss prevention company that alerted its customers of a breach on December 24 after a successful phishing attack on an administrator account for the...
Cyberhaven releases open source tools to detect broad-based Chrome …
Last week, Cyberhaven’s Chrome extension was compromised as part of a larger campaign targeting web extension developers. Security researchers have discovered the same code actively embedded in other extensions dating back to May 2024, and Secure Annex has been maintaining an active list of compromised extension versions and a thorough analysis of the situation, and we highly recommend ...
Cyber firm’s Chrome extension hijacked to steal user passwords
Dec 27, 2024 · Data-loss prevention startup Cyberhaven says hackers published a malicious update to its Chrome extension that was capable of stealing customer passwords and session tokens, according to an...
Hackers hijack a wide range of companies' Chrome extensions, …
Dec 27, 2024 · Hackers have compromised several different companies' Chrome browser extensions in a series of intrusions dating back to mid-December, according to one of the victims and experts who have...
Cyberhaven Chrome Extension Compromised in Targeted Attack
On December 24, 2024, at approximately 5:24 PM UTC, Cyberhaven experienced a sophisticated and targeted attack.According to an official statement from the company, the attacker successfully gained access to a Cyberhaven employee’s account and used this foothold to publish a malicious version of the Cyberhaven Chrome extension (version 24.10.4) to the Chrome Web Store early the following morning.
Hackers hijacked legitimate Chrome extensions to try to steal data
Dec 28, 2024 · Cybersecurity startup Cyberhaven’s Chrome extension was hijacked to steal cookies and authentication data with a hacked update uploaded on Christmas Day.
- Some results have been removed