Otto-JS provides automated malvertising protection to help achieve PCI DSS version 4 compliance, addressing requirements 6.4.3 and 11.6.1 through a one-line integration.
A vulnerability in web browser spell-checkers may have exposed saved passwords. Researchers discovered the flaw allows unauthorized access to stored credentials during spell-check operations. The issue affects multiple browsers, though no widespread leaks have been confirmed.
Google and Microsoft’s browsers now store all typed text, including passwords, in the Advanced Spellchecker feature. Users may unknowingly enable this setting, which saves entries across devices using the same account. The feature lacks clear warnings about the scope of data retention, raising privacy concerns for sensitive inputs like credentials.
Browser spellcheckers may expose saved passwords by sending autocomplete suggestions to third-party servers. Researchers demonstrate how this flaw allows tracking user activity across websites. The issue affects major browsers relying on external spellcheck services.
Google Chrome and Microsoft Edge spellcheckers contain a security flaw that may expose users' passwords. The vulnerability allows potential access to sensitive personal data during spell-checking processes. Researchers highlight the risk for users relying on advanced spellcheck features.