NewsDark Reading
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
Teaser from the source
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval despite researcher warnings.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on Downloaded
Other advisories
- HighCVE-2026-111493Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be downloaded using predictable identifier…
- LowCVE-2026-113714virtualenv: Downloaded wheel selection and caching precede verification
- Not ratedosv:CLEANSTART-2024-YN90913When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operation on the same domain, regardless of whether the origin...
- Not ratedosv:CLEANSTART-2024-XF43312If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with a...
- Not ratedosv:CLEANSTART-2024-WA51844When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operation on the same domain, regardless of whether the origin...
- Not ratedosv:CLEANSTART-2024-EC89121If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with a...
- Not ratedosv:CLEANSTART-2024-JT10095When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest
- Not ratedosv:CVE-2026-119764Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview
Other news entries
- Cyberattack wipes cloud data at Russian hosting provider BegetBreachpwn.watch
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Ireland's Employment Permits Portal breach: stolen data for general customers limited to namesBreachpwn.watch
- Kernel (kernel.sh) breach: leaked API key led to logging data theft and cryptominers on browser serversBreachpwn.watch
- Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorNewsThe Hacker News
- Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as AnotherNewsThe Hacker News
- Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and StealerNewsThe Hacker News
- Danish university DTU breach exposes data of up to 200,000 peopleNewsBleepingComputer
ID