Cyberhaven
Disclosed Dec 27, 20241 year agoUnverified
Hackers push malicious Cyberhaven Chrome extension update to steal sessions
Data loss prevention company Cyberhaven said attackers compromised a company account and published a malicious version of its Chrome extension on December 25, 2024 that could exfiltrate authenticated sessions and cookies; it removed the version the same day.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Dec 27, 2024 |
| Discovered | Dec 25, 2024 |
| Attack | Supply chain |
| Data exposed | Credentials and tokens, Other |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| Cyberhaven says it was hacked to publish a malicious update to its Chrome extensiontechcrunch.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Dec 27, 2024 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.