Google Chrome may soon block New Tab hijacker extensions by default

BleepingComputer security feed covering critical software vulnerabilities, active exploitation and infrastructure attacks, supply-chain compromises, data breaches, malicious AI-assisted activity, and security updates. Key risks include unauthenticated remote code execution in Rails Active Storage and JetBrains TeamCity, VMware authentication bypasses and VM escapes, attacks on exposed water-sector PLCs, malicious package takeovers and npm supply-chain attacks, and cryptocurrency theft through compromised advertising scripts.