Critical Flaws in Chrome Extensions Expose Millions to Browser Compromise

Security researchers at Rebora Security have identified critical vulnerabilities in popular Chrome extensions SiderAI and MaxAI, affecting millions of users. The vulnerabilities, named 'Spyder' and 'MaXSS', allow attackers to fully compromise browser sessions, potentially accessing sensitive data. These extensions, which have over 10 million installations, are designed to assist users with AI-powered features. The flaws pose a significant risk as they transform these tools into vectors for malicious exploitation. Users of Chrome and other Chromium-based browsers are particularly at risk. Immediate action is recommended to mitigate potential threats. The vulnerabilities have been disclosed as part of ongoing security research efforts.

Key Points: • Critical vulnerabilities in SiderAI and MaxAI extensions affect over 10 million users. • Attackers can fully compromise browser sessions using the 'Spyder' and 'MaXSS' exploits. • Users of Chrome and Chromium-based browsers are urged to take immediate action.