Despite Google’s latest efforts to enhance security, many extensions continue to exploit loopholes in its latest extension framework, Manifest V3 (MV3), potentially exposing millions to data theft and malware. To improve browser extension security, SquareX is developing solutions including fine-tuned policies that allow administrators to decide which extensions to permit and real-time blocking of network requests made by extensions.
Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails
A Windows NT LAN Manager (NTLM) security flaw was exploited by Russia-linked cybercriminals targeting Ukraine. The flaw, CVE-2024-43451, allows users’ NTLMv2 hash information to be