Cyber CrimeTwitch Extension Token Leak Hits 31K Users
A cross-store Twitch extension sent OAuth tokens for roughly 31,000 users to operator proxies, Socket reports.
> Search
11 results for “extensions”
Cyber Crime
SecurityBrowser extensions turn into supply chain risk
Attackers buy legitimate Chrome, Edge extensions and push malware via updates, Socket reports.
Cyber CrimeMalicious Firefox Add-ons Target Web3 Wallets
Researchers found 40 malicious Firefox extensions impersonating Web3 products to steal wallet secrets.
Cyber CrimeFake VPN Extensions Hijack Traffic
Hundreds of malicious Chrome extensions impersonate VPNs, routing user traffic through a proxy.
Cyber CrimeFake Solidity Extensions Steal Crypto Wallets
A malicious VS Code extension pack targets developers, exfiltrating wallets, credentials, and API keys via Telegram.
Cyber CrimeOpen VSX Marketplace Faced 77 Impostors
A malicious campaign on the Open VSX marketplace deployed 77 counterfeit extensions to harvest developer metadata.
SecurityModHeader Fallout: Trusted Extensions Harboring Dormant Data Traps
A popular header-editing tool was removed from major stores after researchers discovered a silent, encrypted exfiltration system.
Tech NewsRed Hat Pivots to Permanent Support Model for Enterprise Linux
A new subscription tier offers indefinite lifecycle extensions for RHEL, targeting industries with long-term infrastructure needs.
SecurityCISA Demands Immediate Action on Exploited Joomla Extension Flaws
Federal agencies face a tight three-day deadline to patch critical remote code execution vulnerabilities in popular Joomla extensions.
SecurityJoomla Add-on Exploits Threaten Web Infrastructure Integrity
Critical RCE flaws in popular Joomla extensions leave unauthenticated websites vulnerable to total compromise by malicious actors.
SecurityWhen Trusted Add-Ons Become Silent Gateways for Web Server Takeovers
The exploitation of critical Joomla extensions highlights a broader trend of automated campaigns targeting vulnerable CMS plugins globally.