More Browser Extensions Hacked – this time Password Managers

Remember when I said don’t install browser extensions, as they have unimaginable access to your private data and secrets?  Well, password managers definitely fall into that category as well! 

In general, never install a browser extension, seriously – it is one of the most insecure things you can do, unless you absolutely trust the vendor with your system, data, and web access!  Trustworthy security vendors are quick to acknowledge and patch such vulnerabilities.   Generally speaking, though, you shouldn’t install browser extensions!

The core of the problem is that browser extensions can spy on your online activity, scrape inputs to websites, capture what you cut/paste, and even change what you see when you go to a website.  These are the exact superpowers that cybercriminals want!  Don’t be a willing victim. 

Now, go remove all those browser extensions you have installed! 

For more information on which Password Managers were hacked, check out the Bleeping Computer article: https://www.bleepingcomputer.com/news/security/major-password-managers-can-leak-logins-in-clickjacking-attacks/

Votes: 0
E-mail me when people leave their comments –

CISO and Cybersecurity Strategist

You need to be a member of CISO Platform to add comments!

Join CISO Platform

Join The Community Discussion

CISO Platform

A global community of 5K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.

Join CISO Community Share Your Knowledge (Post A Blog)
 

 

 

Atlanta Chapter Meet: Build the Pen Test Maturity Model (Virtual Session)

  • Description:

    The Atlanta Pen Test Chapter has officially begun and is now actively underway.

    Atlanta CISOs and security teams have kicked off Pen Test Chapter #1 (Virtual), an ongoing working series focused on drafting Pen Test Maturity Model v0.1, designed for an intel-led, exploit-validated, and AI-assisted security reality. The chapter was announced at …

  • Created by: Biswajit Banerjee
  • Tags: ciso, pen testing, red team, security leadership