Grammarly, Flash Flaw, and Super Bowl Security Leak – Hack Naked News #160

This week, Jason reports on attackers exploiting unpatched flaw in Flash, new Western Digital My Cloud bugs give local attacker root on NAS devices, sensitive Super Bowl security documents found on plane, and more on this episode of Hack Naked News! Ne… Continue reading Grammarly, Flash Flaw, and Super Bowl Security Leak – Hack Naked News #160

Security hole meant Grammarly would fix your typos, but let snoopers read your every word

A Google vulnerability researcher has found a gaping security hole in a popular web browser extension, that could have potentially exposed your private writings on the internet. The Grammarly real-time spelling and grammar checker, which has over seven… Continue reading Security hole meant Grammarly would fix your typos, but let snoopers read your every word

Critical Flaw in Grammarly Spell Checker Could Let Attackers Steal Your Data

A critical vulnerability discovered in the Chrome and Firefox browser extension of the grammar-checking software Grammarly inadvertently left all 22 million users’ accounts, including their personal documents and records, vulnerable to remote hackers.
Continue reading Critical Flaw in Grammarly Spell Checker Could Let Attackers Steal Your Data

Bug in Grammarly browser extension exposes virtually everything a user ever writes

The Grammarly browser extension, which has about 22 million users, exposes its authentication tokens to all websites, allowing any to access all the user’s data without permission, according to a bug report from Google Project Zero’s Tavis Ormandy. The high-severity bug was discovered on Friday and fixed early Monday morning, “a really impressive response time,” Ormandy wrote. Grammarly, launched in 2009 by Ukrainian developers, looks at all messages, documents and social media posts and attempts to clean up errors so the user is left with the clearest English possible. The browser extension has access to virtually everything a user types, and therefore an attacker could access a huge trove of private data. Exploitation is as simple as a couple of console commands granting full access to everything, as Ormandy explained. It’s not clear if the vulnerability was ever exploited. Grammarly has not responded to a request for comment. The vulnerability affected Chrome and Firefox. Updates are now available for […]

The post Bug in Grammarly browser extension exposes virtually everything a user ever writes appeared first on Cyberscoop.

Continue reading Bug in Grammarly browser extension exposes virtually everything a user ever writes