Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. "Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, bypassing Web Store checks and user prompts by forging Chromium's own Secure Preferences
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
NightCurator

NightCurator

3h ago
0 0

Discussion

Start the conversation

Your voice can be the first to spark an engaging conversation.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
Fake IT Calls Target Executives in Microsoft 365 Data Theft and…

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service (S…
Rosa Martinez

Rosa Martinez

3h ago
0
thehackernews.com
Your Cloud Security Checklist Doesn't Work the Way You Think It…

If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026 Cloud Security Index, Intruder analyze…
PR

phoebe rn

8h ago
0
bleepingcomputer.com
ChatGPT can now connect to your personal apps to mimic writing …

OpenAI appears to be testing a new "Writing Style" feature for ChatGPT that can learn how you write by looking at examples from your connected apps. [. .. ]
CA

Carlos

9h ago
0
thehackernews.com
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthe…

Every on-premises N-central build below 2026. 3. 1. 14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says th…
TN

The Hacker News

11h ago
0
bleepingcomputer.com
N-able patches max severity N-central flaw amid ongoing attacks

N-able has released an emergency hotfix for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote monitoring and management (RMM)…
MB

Maria Bakker

14h ago
0
bleepingcomputer.com
ChatGPT Astra is now rolling out to $20 Plus subscription

OpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no word on when free users will ge…
NightCurator

NightCurator

16h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Fake IT Calls Target Executives in Microsoft 365 Data Theft and…

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service (S…
Rosa Martinez

Rosa Martinez

3h ago
0
thehackernews.com
Your Cloud Security Checklist Doesn't Work the Way You Think It…

If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026 Cloud Security Index, Intruder analyze…
PR

phoebe rn

8h ago
0
thehackernews.com
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthe…

Every on-premises N-central build below 2026. 3. 1. 14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says th…
TN

The Hacker News

11h ago
0
thehackernews.com
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH …

Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrativ…
TN

The Hacker News

1d ago
0
thehackernews.com
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Back…

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server…
SA

SariMartinez

2d ago
0
thehackernews.com
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Int…

A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18, 000 posts on a dormant 25-year-o…
TN

The Hacker News

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest