Google Chrome Warning Issued For Most Windows PC Users

Beware this hidden Chrome threat.
This is another interesting month for Google's 3 billion Chrome users, with a U.S. government mandate to update all browsers by June 26 and another update warning this week as further vulnerabilities are discovered. But there's a very different Chrome threat to your PC, and it's much more difficult to find and fix.
Already this month we have been warned by LayerX that 'a network of malicious sleeper agent extensions" are 'waiting for their 'marching order' to execute malicious code on unsuspecting users' computers.' A huge number of Chrome users have at least one extension installed, which is one of the browser's biggest security risks.
Now Symantec warns that some of the most popular extensions it has analyzed, 'expose information such as browsing domains, machine IDs, OS details, usage analytics, and more.' The research team says 'many users assume that popular Chrome extensions adhere to strong security practices,' but that's just not the case.
Symantec found that even some big-brand extensions 'unintentionally transmit sensitive data over simple HTTP. By doing so, they expose browsing domains, machine IDs, operating system details, usage analytics, and even uninstall information.'
More alarmingly, 'because the traffic is unencrypted, a Man-in-the-Middle (MITM) attacker on the same network can intercept and, in some cases, even modify this data, leading to far more dangerous scenarios than simple eavesdropping.'
Bugcrowd's Trey Ford told me 'this is a very common way to compromise browsers for various outcomes, ranging from stealing credentials and spying on users, to simply establishing ways to very uniquely identify and track users across the internet. Ultimately this can manifest as a form of malware, and unavoidably create new attack surface for miscreants to attack and compromise a very secure browsing experience.'
There's no easy answer to this one. Symantec says that while 'none of [the extensions] appear to leak direct passwords,' the data can still fuel attacks. 'The risk is not just theoretical; unencrypted traffic is simple to capture, and the data can be used for profiling, phishing, or other targeted attacks.'
Symantec notified the developers behind the tested extensions (details in its report.) 'The overarching lesson,' the team says, 'is that a large install base or a well-known brand does not necessarily ensure best practices around encryption. Extensions should be scrutinized for the protocols they use and the data they share.'
According to Keeper Security's Patrick Tiquet, 'this highlights a critical gap in extension security,' if and when 'developers cut corners.' He warns that 'transmitting data over unencrypted HTTP and hard-coding secrets exposes users to profiling, phishing and adversary-in-the-middle attacks – especially on unsecured networks.'
The risk is especially acute for enterprises. 'Organizations should take immediate action by enforcing strict controls around browser extension usage, managing secrets securely and monitoring for suspicious behavior across endpoints. Just because a browser extension is very popular and has a large user base doesn't mean it's secure. Businesses must scrutinize all browser extensions to protect sensitive data and identities.'

Try Our AI Features

Explore what Daily8 AI can do for you:

Learn with AIFact CheckingText to SpeechAI Summary

Related Articles

Yahoo

29 minutes ago

• Yahoo

Watch These Bitcoin Price Levels Amid Volatile Trading After U.S. Strikes Iran

Bitcoin briefly fell below $99,000 on Sunday to its lowest level in more than six weeks as news that the U.S. had struck Iranian nuclear sites caused investors to reassess their appetite for risky assets. After trending sharply higher between early April and late May, the cryptocurrency has consolidated within a descending channel. Investors should watch crucial support levels on Bitcoin's chart around $100,000 and $92,000, while also monitoring resistance levels near $107,000 and $112, (BTCUSD) briefly fell below $99,000 on Sunday as news that the U.S. had struck Iranian nuclear sites caused investors to reassess their appetite for risky assets. The digital currency moved as low as $98,200 on Sunday afternoon, its lowest level since May 8, amid uncertainty about the geopolitical and economic outlook after the U.S. late Saturday entered a conflict between Israel that had intensified over the past week. In recent trading, bitcoin had rebounded to about $101,200 but was still well down from its high last Monday of near $109,000. Below, we take a closer look at bitcoin's chart and apply technical analysis to identify crucial price levels worth watching out for. After trending sharply higher between early April and late May, bitcoin has consolidated within a descending channel. Over the past week, the cryptocurrency's price has retraced toward the pattern's lower trendline, an area on the chart that closely aligns with the psychological $100,000 level. Moreover, recent selling has coincided with the relative strength index falling below its neutral threshold, signaling weakening price momentum. Let's identify crucial support and resistance levels on Bitcoin's chart. Investors should initially monitor the $100,000 level. This area on the chart is likely to gain significant attention near the descending channel's lower trendline and a range of corresponding trading activity stretching back to last November. A decisive close below this level could see the cryptocurrency's price revisit lower support around $92,000. Investors may seek buying opportunities in this area near a horizontal line that links a series of price action on the chart between November and April. The first resistance level to watch sits around $107,000. The cryptocurrency could face overhead selling pressure in this location near the descending channel's top trendline, which also closely aligns with prominent peaks that formed on the chart in December and January. Finally, buying above this level could see BTC bulls push the price toward $112,000. Investors who have accumulated bitcoin during its recent retracement could decide to lock in profits near last month's high, which also marks the cryptocurrency's all-time high. The comments, opinions, and analyses expressed on Investopedia are for informational purposes only. Read our warranty and liability disclaimer for more info. As of the date this article was written, the author does not own any of the above securities. Read the original article on Investopedia Error in retrieving data Sign in to access your portfolio Error in retrieving data Error in retrieving data Error in retrieving data Error in retrieving data

CNET

32 minutes ago

• CNET

We Love This Razer Basilisk V3 Gaming Mouse, and It's Now a Massive $30 Off

If you're into gaming, you know the right gear could save you valuable seconds that might make the difference between winning and losing. However, gaming accessories such as headsets, keyboards or a mouse can add up. The right deal can help you save on gaming items so you can enjoy your favorite hobby while saving your hard-earned dollars. Right now, we've spotted the Razer Basilisk V3 gaming mouse for just $40 at Amazon, saving you $30 over its typical asking price of $70. Best Buy also matches this deal, giving you an extra option for where to find these savings. Though there's no set deadline on this deal, this is a great offer ahead of Prime Day and could likely go fast, so acting quickly can help you get your hands on this gaming mouse. The Razer Basilisk V3 gaming mouse has an ergonomic design that allows you to rest your thumb while playing comfortably. Its 11 buttons are also placed in strategic parts of the mouse and can be programmed with your preferred shortcuts. The Basilisk V3 can support up to 16.8 million colors and can react with up to 150 Chroma-integrated games for better ambiance while you play. It includes a 26K DPI optical sensor for more precise clicking. Plus, this gaming mouse has a tilt wheel for smoother scrolling. Looking for a new gaming mouse and aren't sure if this deal is for you? Check out our list of the best gaming mouse deals so you can compare before you shop. Why this deal matters The Razer Basilisk V3 gaming mouse is ergonomic, customizable and usually costs $70. However, this deal at both Amazon and Best Buy saves you $30 for a limited time, allowing you save approximately 43% for a limited time. That makes now a great time to grab this deal if you're looking for a new gaming mouse.

Yahoo

39 minutes ago

• Yahoo

Elon Musk Announces Launch of New Business Venture

It's official: Tesla is in the robotaxi industry. After revealing that Tesla would begin rolling out autonomous cabs this year, Tesla co-founder and CEO Elon Musk announced the company is officially launching it's robotaxi service on Sunday, June 22. In a post on X, Musk revealed that the robotaxis will debut in Austin, Texas, and customers will pay a flat fee of $4.20. "The (Tesla AI) robotaxi launch begins in Austin this afternoon with customers paying a $4.20 flat fee!" Musk exclaimed. With the launch, Tesla will now look to make up ground on Waymo, which is the current king of the industry. Waymo claims to have taken 10 million paid rides in all and services several major cities, including Austin, where Tesla is debuting on Sunday. Meanwhile, Amazon is also expected to get into the industry this year. The mega corporation spent $1.2 billion to acquire Zoox about five years ago and it has since built a plant in Silicon Valley that is expected to produce 10,000 robotaxis per year. However, Amazon and Zoox are not as far along as Waymo and Tesla, with the duo set to begin its service in Las Vegas later this year, and then in San Francisco next Musk Announces Launch of New Business Venture first appeared on Men's Journal on Jun 22, 2025 Error while retrieving data Sign in to access your portfolio Error while retrieving data Error while retrieving data Error while retrieving data Error while retrieving data