Evernote Chrome extension flaw could have allowed access to personal info

Guardio discovered a major flaw in Evernote’s Web Clipper Chrome extension’s code that left it vulnerable, potentially allowing threat actors to access personal information from users’ online services. The vulnerability, a Universal X… Continue reading Evernote Chrome extension flaw could have allowed access to personal info

Evernote patches flaw potentially affecting 4.6 million users of Google Chrome extension

Evernote last month fixed a security flaw in a Google Chrome extension that could have allowed hackers to access information about roughly 4.6 million users, according to new research. Security vendor Guardio announced Wednesday it had discovered a vulnerability in Evernote’s Web Clipper extension for Chrome that could have allowed attackers to bypass the browser’s “same origin policy,” a security protocol meant to limit malicious scripts from spreading. Exploiting the flaw would have allowed attackers to gain privileges outside Evernote’s domain in Chrome — including access to a user’s other web content and services, researchers said. Evernote resolved the flaw within days, Guardio said, and there is no evidence the bug was exploited. Evernote did not respond to a request for comment from CyberScoop. The California company designs note-taking software that syncs and archives user files like lists, file attachments and websites between multiple devices. “Evernote was at the top of the list […]

The post Evernote patches flaw potentially affecting 4.6 million users of Google Chrome extension appeared first on CyberScoop.

Continue reading Evernote patches flaw potentially affecting 4.6 million users of Google Chrome extension

Evernot? The Problem with Cloud Services (Premium)

Evernote’s impending failure raises questions, but there’s a broader debate to be had about how you choose the services you use and why.
The post Evernot? The Problem with Cloud Services (Premium) appeared first on Thurrott.com.
Continue reading Evernot? The Problem with Cloud Services (Premium)

Evernote refines integrations with Slack and Salesforce

When you’re working in a key business tool like Slack or Salesforce, you don’t want to switch focus by opening up another application to pull additional information. Evernote Business has let you access Evernote content from these applications for some time, and today it announced some refinements to enhance those integrations. The Slack integration had […] Continue reading Evernote refines integrations with Slack and Salesforce