Malicious browser extensions are putting over 2.6 million Chrome users at risk, by exposing sensitive data such as browsing history and account credentials, according to security research. Cybersecurity firm Cyberhaven identified a campaign where hackers exploit extensions to steal sensitive user data. Separate research by Secure Annex has identified over 20 compromised extensions. Users are advised to remove any compromised extensions immediately.

The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.