ThreatVectr
Tag

#browser extension

7 stories taggedbrowser extension.

Photoreal editorial image, 16:9, full-frame edge to edge, of a dim server room with one rack unit powered off, its status lights dark while surrounding units gl
Vulnerabilities

A Flaw in N-able's Passportal Handed Any Malicious Website the Keys to Every Password a Business Stored

A researcher found that Passportal's browser extension trusted every message it received without question, letting any webpage silently drain a company's entire vault of login credentials.

4 min read
Photoreal news-editorial image, full-frame edge-to-edge 16:9 composition
Vulnerabilities

Millions of Belgians' IDs and bank accounts were wide open through a government browser extension

A browser extension used by more than 2 million Belgians to log into government and banking websites contained flaws so serious that criminals could have stolen identities, hijacked payment cards, and taken full control of victims' computers. The vendor fixed the problems on 22 July.

4 min read
Full-frame photoreal editorial image of a dimly lit government office at night in Southeast Asia, empty desk with a glowing monitor showing abstract green code
Threat Intelligence

Meet Jewelbug: The Chinese Hacker-for-Hire Group Stealing Crypto and Spying on Governments at the Same Time

A single criminal outfit is running a massive cryptocurrency scam network with one hand and breaking into Middle Eastern government email systems with the other. Researchers say the group almost certainly works for China.

3 min read
Full-frame photoreal editorial shot of a dimly lit server rack in a small unmarked room, one door left ajar with light spilling into a corridor, cables slightly
Threat Intelligence

Fake CCleaner site turns Chrome into a spying and password-theft tool

Criminals built a convincing copycat download page for one of the world's most-downloaded PC tools, then used it to silently hijack Google Chrome and steal passwords, bank details, and screenshots.

4 min read
A vast server room bathed in cool blue and amber light, rows of illuminated rack units receding into the distance, access control panel with a glowing keypad mo
Identity & Access

Two Million Belgians Exposed by Flaws in the Software They Use to Sign Legal Documents Online

Security researcher James Arnott found that Belgium's most-used digital identity tool could let any malicious website steal a user's PIN, forge their electronic signature, or quietly run attack code on their computer, all without the victim clicking anything suspicious.

4 min read
A close-up, editorial-style photograph of a rack of illuminated server hardware in a dark data centre, cooling fans visible, status LEDs casting blue and amber
Vulnerabilities

A Browser Extension Installed 300 Million Times Had a Flaw That Let Attackers Steal Your WhatsApp Messages

A security hole in Adobe's widely used browser extension meant that simply visiting the wrong website could hand criminals your private messages and contacts.

3 min read
A sleek server room bathed in cool blue light, rows of black server racks stretching into the distance, a single amber warning light glowing on one unit in the
AI Security

Bugs in Claude's Chrome Extension Let Other Add-Ons Read Your Gmail and Docs

Security researchers say two unpatched flaws in Anthropic's browser assistant can be exploited to silently pull private data from Google services, and a simple one-line fix has gone unshipped for months.

3 min read
© 2026 Threat Vectr