News Summary

Cyberhaven, a data-loss prevention startup, has experienced a significant security breach after hackers published a malicious update to its Chrome extension. The update, identified as version 24.10.4, enabled attackers to steal sensitive data, including authenticated sessions and cookies, from users. The breach was detected on December 25, 2024, prompting Cyberhaven to remove the malicious extension from the Chrome Web Store and release a new safe version (24.10.5). Cyberhaven’s customer base includes major corporations like Motorola, Reddit, and Snowflake. The attack is believed to be part of a larger campaign targeting various Chrome extension developers. Cyberhaven has initiated a comprehensive review of its security practices and is cooperating with federal law enforcement while working with incident response firm Mandiant.