Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Fake Chrome VPN Extensions: 737 Malicious Add-Ons Routing Traffic Through Attacker SOCKS5 Proxies — Detection and Removal Guide
Introduction Researchers have uncovered a coordinated campaign of more than 737 browser extensions published to the Chrome Web Store that im...
737 Malicious Chrome VPN Extensions Caught Proxying User Traffic — Detection, Hunting, and Removal Guide
Introduction A newly disclosed campaign has put a hard number on a problem many of us in IR have been quietly tracking for years: 737 free V...
Chrome Browser Hardening: Blocking Policy-Installed Extension Hijackers
Introduction Browser integrity is the first line of defense for the modern workforce. For years, SOC analysts and incident responders have b...
Chrome 149-151 Patch Cycle: Mitigating 1,442 Security Flaws
Chrome 149-151 Patch Cycle: Mitigating 1,442 Security Flaws Introduction In a unprecedented move highlighting a significant shift in vulnera...
openSUSE Tumbleweed: Mozilla Firefox 153.0-1.1 Update Mitigates 63 Security Flaws
openSUSE Tumbleweed: Mozilla Firefox 153.0-1.1 Update Mitigates 63 Security Flaws Introduction The openSUSE security team has released advis...
In-Memory Malware Assembly via Malvertising: Defense Against Fileless Browser Attacks
Introduction Security Arsenal is tracking a significant evolution in malvertising tactics. Attackers have moved beyond simple drive-by downl...
Adobe Acrobat Chrome Extension Flaw: Defending Against WhatsApp Web Data Exfiltration
Introduction A critical security vulnerability has been identified in the widely deployed Adobe Acrobat extension for Google Chrome. This fl...
Defending Against the Surge in ACR Stealer Attacks: Detection and Incident Response
Introduction Microsoft has issued a critical warning regarding a significant surge in attacks leveraging the "ACR Stealer" malware against e...
ACR Stealer & ClickFix: Detecting Browser Token Theft and M365 Data Exfiltration
Introduction Defenders are currently facing a renewed and highly effective infection chain using "ClickFix" social engineering to deploy the...