82 Chrome Extensions Found Selling User Data, 6.5 Million Users Affected

Multiple high-impact security incidents and active malware/abuse campaigns were reported: research found 82 Chrome extensions collecting and selling user data (≈6.5M users); ShinyHunters leaked data tied to Udemy, Zara and 7-Eleven via alleged Salesforce/cloud records; UNC6692 exploited Microsoft Teams with fake IT alerts to deploy SNOW malware and steal credentials; a new Vidar infostealer variant spreads via fake CAPTCHAs and hides payloads in JPEG/TXT files to steal browser and crypto wallet data. Microsoft patched a Service Principal/Entra Agent ID privilege escalation that enabled tenant‑