Cofounder and CTO at Nudge Security. Ex-AlienVault. Talking about AI, Threat Intel, SaaS securityhttps://bsky.app/profile/jaimeblascob.bsky.socialhttps://bsky.app/profile/jaimeblascob.bsky.social/post/3leawruu6as2gparrottalks extension also affected (40k users) kkodiihpgodmdankclfibbiphjkfdenh t.co/SMFH07Gnv827 Dec 2024 02:26 +0000at://did:plc:onaivoscxhr2o7nuserwwnjl/app.bsky.feed.post/3leawruu6as2ghttps://bsky.app/profile/jaimeblascob.bsky.social/post/3leauv4k7nc2gUvoice (40k downloads) also compromised today using uvoice[.]live oaikpkmjciadfpddlpjjdapglcihgdle t.co/hGkxieETWj27 Dec 2024 01:52 +0000at://did:plc:onaivoscxhr2o7nuserwwnjl/app.bsky.feed.post/3leauv4k7nc2ghttps://bsky.app/profile/jaimeblascob.bsky.social/post/3leatub6e4s2gVPNCity chrome extension also affected https://chromewebstore.google.com/detail/vpncity-fast-unlimited-vp/nnpnnpemnckcfdebeekibpiijlicmpom more than 50k users. Using the vpncity[.]live domain27 Dec 2024 01:33 +0000at://did:plc:onaivoscxhr2o7nuserwwnjl/app.bsky.feed.post/3leatub6e4s2ghttps://bsky.app/profile/jaimeblascob.bsky.social/post/3leaskz446c2gRegarding the Cyberhaven chrome extension compromise I have reasons to believe there are other extensions affected. Pivoting by the ip address there are more domains created within the same time range resolving to the same ip address as cyberhavenext[.]pro (cont)27 Dec 2024 01:10 +0000at://did:plc:onaivoscxhr2o7nuserwwnjl/app.bsky.feed.post/3leaskz446c2ghttps://bsky.app/profile/jaimeblascob.bsky.social/post/3ld2kvphg322tGoogle IS dancing11 Dec 2024 20:12 +0000at://did:plc:onaivoscxhr2o7nuserwwnjl/app.bsky.feed.post/3ld2kvphg322thttps://bsky.app/profile/jaimeblascob.bsky.social/post/3lc6uk6ghg22mSee you in Baides Austin next week.30 Nov 2024 19:50 +0000at://did:plc:onaivoscxhr2o7nuserwwnjl/app.bsky.feed.post/3lc6uk6ghg22m