The data-loss startup says it was targeted as part of a "wider campaign to target Chrome extension developers." © 2024 TechCrunch. All rights reserved. For personal use only.
Cyberhaven, a data-loss prevention company, was hacked, allowing malicious actors to publish a compromised update for its Chrome extension. This update could have stolen user passwords and session tokens, potentially exposing customer data. Cyberhaven has removed the malicious extension and released a new legitimate version, advising affected users to take immediate steps to secure their accounts.
The core conceptual idea is that a trusted software provider was successfully compromised, leading to a supply-chain attack where users unknowingly installed malicious code. This highlights the vulnerability of relying on extensions and the importance of robust security measures for developers and users alike.
Cyberhaven, a data-loss prevention company, was hacked, allowing malicious actors to publish a compromised update for its Chrome extension. This update could have stolen user passwords and session tokens, potentially exposing customer data. Cyberhaven has removed the malicious extension and released a new legitimate version, advising affected users to take immediate steps to secure their accounts. The core conceptual idea is that a trusted software provider was successfully compromised, leading to a supply-chain attack where users unknowingly installed malicious code. This highlights the vulnerability of relying on extensions and the importance of robust security measures for developers and users alike.
