Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
2026-06-26T07:24:06Z•e6dc7fb1d54c63d9316cf3705e02a85b2cba88aaab50f985212b463bcf739199
CI/CDactive-exploitationbrowser-extensionciscocredential-theftfortigateincident-responselantronixmacosmalwarenetworkingnpmprompt-injectionproxyrmmsupply-chainthreat-actorvulnerabilitywordpresszero-day
What happened
This feed highlights multiple high-impact security incidents and research: a popular Chrome extension (Adblock for YouTube) was found to include dormant arbitrary-JavaScript injection capability; multiple actively exploited vendor flaws in networking gear (Cisco Catalyst SD‑WAN CVE-2026-20245 and Cisco Unified CM CVE-2026-20230) and a critical Lantronix EDS5000 code-injection bug (CVE-2025-67038) are being exploited in the wild; large-scale credential-harvesting (FortiBleed) and supply-chain compromises (ShapedPlugin WordPress backdoors, malicious npm packages) were disclosed; CI/CD supply‑cha
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- e6dc7fb1d54c63d9316cf3705e02a85b2cba88aaab50f985212b463bcf739199
- Enrichment time
- 2026-06-26T07:24:06Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.