A Twitch extension with 30,000+ installs reportedly sent users’ active session keys to JeetBot, according to Socket.

No account takeovers are confirmed…

https://en.hacks.gr/prostheto-toy-twitch-me-pano-apo-30-000-egkatastaseis-estelne-kleidia-syndesis-sti-jeetbot/

#Twitch #JeetBot #BrowserPrivacy

Set Chrome to wipe site data when you close it, and it does - for every site except google.com. Cookies and local/session storage there survive a restart. Same bug Google fixed six years ago, apparently un-fixed itself. Writeup: https://lapcatsoftware.com/articles/2026/9/1.html

#BrowserPrivacy