A major cybersecurity breach has been uncovered involving approximately three dozen Google Chrome extensions, affecting an estimated 2.6 million devices. The sophisticated attack campaign successfully harvested sensitive data, including Facebook credentials and OpenAI ChatGPT access information, over several months.

Key Developments:

– Cyberhaven’s browser extension was compromised through a spear-phishing attack targeting an employee
– The attack utilized a fake Google consent screen requesting permissions for a “Privacy Policy Extension”
– Reader Mode and other extensions were targeted in related data-gathering operations since April 2023
– Malicious code embedded in extensions logged users’ browsing history

Notable Security Updates:

1. Apple’s $95M Siri Privacy Settlement
– Compensation of up to $20 per Siri-enabled device
– Addresses unauthorized voice recordings concerns

2. Windows Server Vulnerability
– LDAPNightmare exploit poses denial-of-service risk
– Critical patches released for CVE-2024-49113

3. U.S. Treasury Department Incidents
– Major cybersecurity breach linked to Chinese actors
– Compromised BeyondTrust API key enabled unauthorized access

4. New Attack Techniques
– “DoubleClickjacking” bypasses traditional clickjacking protections
– QR code-based attacks circumvent browser isolation

Financial Impact:

– $494 million stolen through wallet drainer attacks in 2024
– 67% increase in cryptocurrency theft year-over-year
– Web3 security incidents resulted in $2.3 billion losses

Preventive Measures:
– Implement comprehensive security programs
– Regular security updates and patches
– Enhanced authentication protocols
– Careful vetting of browser extensions
– Monitoring of API key access