Wednesday, September 3, 2008
Web filters in Google's new Chrome browser can be circumvented, leaving users vulnerable to a carpet-bombing attack, ZDNet has warned.
Released today in beta stage, the application fails to resolve previously identified web security vulnerabilities which can be exploited using malicious Java scripts.
Network security researcher Aviv Raff has demonstrated that the problem can be readily exploited in the Chrome browser, leaving Windows users open to a range of malicious exploits.
Using a social engineering exploit, Raff showed that viruses and other forms of malware can be placed on users' desktops within two mouse clicks.
"Some Google Chrome early adopters using Windows Vista are reporting that files downloaded from the internet are automatically dropped on the desktop," ZDNet went on to claim.
Google developers claim that the Chrome browser offers a more stable browsing experience due to its process-based architecture.
With browser tabs running separate tabs, the software is intended to increase stability and free up system memory for fast browsing.
Related News:
Potential for more Twitter hacks - 1.7.2009
In the wake of some hackers gaining control of celebrity Twitter accounts, some security experts are expounding on the future of security breaches with the social networking site.
Significant increase in data breaches in 2008 - 1.7.2009
Despite more intelligent IT managers and security programs, there was a rise in data-loss incidents last year when compared to 2007.
Google one of the worst spam providers - 1.7.2009
Spamhaus has ranked Google as the third worst spam service provider, below the sites sistemnet.com.tr and hostfresh.com.
European police forces encouraged to hack? - 1.6.2009
In an effort to gain some ground on cybercriminals, it appears police forces all over Europe are being encouraged to "resort to remote searches" as another mode of surveillance, BBC News reports.
Online propaganda war escalates - 1.6.2009
More than 10,000 websites have been defaced or compromised by hackers in an effort to show their pro-Palestinian support during the ongoing Gaza Strip conflict.
