Malicious Chrome extensions can spoof password managers in new attack

Published on March 6, 2025

A newly devised "polymorphic" attack allows malicious Chrome extensions to morph into browser extensions, including password managers, crypto wallets, and banking apps, to steal sensitive information. [...]

Continue reading on website
Other news

Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution

March 6, 2025
Elastic has rolled out security updates to address a critical security flaw impacting the Kibana data visualization dashboard software for Elasticsearch that could result in arbitrary code execution.The vulnerability, tracked as CVE-2025-25012, carries a CVSS score of 9.9 out of a maximum of 10.0. It has been described as a case of prototype pollution."Prototype pollution in Kibana leads to

Free vCISO Course: Turning MSPs and MSSPs into Cybersecurity Powerhouses

March 6, 2025
The vCISO Academy is a free learning platform to equip service providers with training needed to build and expand their vCISO offerings. Learn more from Cynomi on how the Academy helps you launch or expand your vCISO services. [...]