25% di collaudate estensioni di Google Chrome permette il furto di dati – Guida Security Net
27 of a 100 tested Google Chrome extensions have been found vulnerable to data (password, history, etc.) extraction attacks though specially crafted malicious websites or by attackers on public WiFi networks.
A trio of security researchers have manually analyzed 50 of the most popular Chrome extensions and added to that list 50 more chosen by random.
“We looked for JavaScript injection vulnerabilities in the cores of the extensions (the background, popup, and options pages); script injection into a core allows the complete takeover of an extension,” explained Adrienne Porter Felt, one of the researchers. To prove their claim, they performed PoC attacks devised to take advantage of the vulnerabilities.
The bad news is that over 25 percent of the tested extensions were found to be vulnerable, and among them are seven that are used by over 300,000 utenti.
Per saperne di più: Guida Security Net
Air traffic control data found on eBayed network gear, NATS passwords and info left on £20 switch – The Register Quasi 5 milioni di militari per la cura della salute dei file rubati – Guida Security Net
Aggiungi un commento Facebook