August 11, 2020 - ThreatPost is reporting that a flaw in Google's Chrome browser could allow hacker to gain access to the personally identifiable information of users. That means that billions of people around the globe are vulnerable. Because several other popular browsers are built on Chrome, the problem is even larger. Without going into all of the technical details, here is what you need to know.
The Flaw
The flaw in Chrome allows hackers to bypass something called CSP (content security policy). Ironically, CSP is used by most websites to prevent hacking. The flaw has accessible to hackers since March of last year but Chrome's latest iteration fixes the issue.
Which Browsers Are Impacted?
The CSP issue can be found in Chrome, Microsoft Edge and Opera browsers. Yandex, which is built on Chrome, was apparently not impacted. The flaw includes browsers that run on Window, Apple's IOS and Android platforms.
What Data Can Hackers Access?
Even though the browser's security is responsible for allowing hackers to gain access to data, hackers actually have to attack specific sites in order for the hem to be able to steel your information. So simply because you use Chrome, doesn't mean that you are going to become a victim of data theft. For that to happen, you have to use Chrome and visit a site with malicious script on it. That script would have been left by the hackers.
Once you visit a site that has been hacked, then the hackers can gain access to any personally identifiable information you share with the site.
How Can You Fix The Problem?
This is probably the best news. The fix is very simple. Just download and install the latest version of Chrome and you will no longer be faced with this issue.
Scope Of This Problem
While the fix here may be easy, the scope of the problem is difficult to grasp. Chrome is the most popular browser on the internet and its users span the entire globe. Add to that that millions of people who don't use Chrome are actually using browsers that are built on it, with enhanced features. This exploit potentially impacts billions of people.
It is likely to be some time before we know how much damage has been done as a result of this security flaw. For anyone who is a Chrome user, you need to pay attention to your bills and your credit reports for the foreseeable future.
by Jim Malmberg
Note: When posting a comment, please sign-in first if you want a response. If you are not registered, click here. Registration is easy and free.
|