Threat actors can secretly hijack devices using a new attack known as Browser Syncjacking, involving a malicious Chrome extension. They establish a malicious Google Workspace domain and publish a seemingly legitimate browser extension on the Chrome Web Store. Once consumers download the extension, attackers can gain access to all their device’s data and manipulate them into installing a fake software update, enabling total browser control. Notably, this attack requires minimal permissions and user interaction.
Another Healthcare Data Breach Compromised a Million Patients’ Information
The Community Health Center (CHC) in Connecticut has revealed a data breach that has put the personal and health data of over a million patients