"The problem we're trying to solve here is that it's really difficult for any individual or organization to look at any given Chrome extension & decide whether or not the risk that the extension brings is acceptable." —@schwascore
Learn more in our blog: https://t.co/uMcvJ5L5Fp https://t.co/AJxm1vpNL4

— Duo Security (@duosec) February 21, 2019

Browser extension security has been a huge blind spot for enterprises, and for browser vendors themselves, but no longer! I'm *so* proud of the work that our team has done here, and *so* excited that we finally get to share it with the world. https://t.co/zwgNNuyLIc

— Adam Goodman (@akgood) February 21, 2019

35% of all Chrome extensions request access to user data on any site.

85% of all Chrome extensions don't have a privacy policy.

9% have access to cookie files.https://t.co/2LZFTbrM3t pic.twitter.com/2SQFtlsnNt

— Catalin Cimpanu (@campuscodi) February 22, 2019

Sysadmins can create a CRXcavator account, install the Chrome extension on their PCs in their fleet, and have report what extensions people have installed. They can later blackball or approve extensions based on their CRXcavator risk scores.

More here: https://t.co/rU9mhJueOJ

— Catalin Cimpanu (@campuscodi) February 21, 2019

We're excited to present CRXcavator (https://t.co/c6vPX30QCs) to help you examine Chrome extensions to understand the risk they could introduce. @crxpert discusses the service's design and just some of our analysis of all the extensions on the Web Store: https://t.co/3CI7ePX06p pic.twitter.com/aOHpeAezs7

— Duo Labs (@duo_labs) February 21, 2019

THIS IS HUGE especially for security review teams at gsuite orgshttps://t.co/nXr4eWuk1T

— Sarah Harvey (@worldwise001) February 21, 2019

From ZDNet: A third of all Chrome extensions request access to user data on any site. Duo Security has found a way to check how much risk they present. https://t.co/g08yPgosB7 via @ZDNet & @campuscodi #Duo

— U-M ITS – Ann Arbor (@umichTECH) February 22, 2019

Eighty-five percent of all Chrome extensions don't have a privacy policy:https://t.co/BeZ8MZrmDA

— Adam Levin (@Adam_K_Levin) February 22, 2019

A third of all Chrome extensions request access to user data on any site | ZDNet https://t.co/S7vg9mNXEI pic.twitter.com/iNPbGAPD90

— Rich Tehrani (@rtehrani) February 22, 2019

Periodic reminder that if you install *any* extension except uBlock Origin in any browser & aren't willing/able to read extension source code, your privacy & safety is at risk // A third of all Chrome extensions request access to user data on any site https://t.co/CYhnCWyPtk

— boB Rudis (@hrbrmstr) February 22, 2019

35% of all Chrome extensions request access to user data on any site.

85% of all Chrome extensions don't have a privacy policy.

9% have access to cookie files.https://t.co/2LZFTbrM3t pic.twitter.com/2SQFtlsnNt

— Catalin Cimpanu (@campuscodi) February 22, 2019

35% of all Chrome extensions request access to user data on any site.

85% of all Chrome extensions don't have a privacy policy.https://t.co/2LZFTbrM3t pic.twitter.com/9O3E1MYDEb

— Catalin Cimpanu (@campuscodi) February 21, 2019

A third of all Chrome extensions request access to user data on any site https://t.co/RYq7fzcrHW via @campuscodi

— ZDNet (@ZDNet) February 22, 2019

#Chrome is only as secure as the extensions you use https://t.co/FvFuz1LNhj $GOOG #Apps

— LNP Server Management (@LNPServerMGMT) February 22, 2019

We're excited to present CRXcavator (https://t.co/c6vPX30QCs) to help you examine Chrome extensions to understand the risk they could introduce. @crxpert discusses the service's design and just some of our analysis of all the extensions on the Web Store: https://t.co/3CI7ePX06p pic.twitter.com/aOHpeAezs7

— Duo Labs (@duo_labs) February 21, 2019

Can you dig it? @duo_labs is excited to announce the public beta of CRXcavator, a free service that analyzes Chrome extensions and produces comprehensive security reports. @crxpert @kylelady @sedward5 @schwascore explain in our blog: https://t.co/uMcvJ5L5Fp pic.twitter.com/eIOcLnUULt

— Duo Security (@duosec) February 21, 2019

"The new tool takes a stab at that security challenge by letting a user enter a Chrome extension and then returning a risk score for the application based on the permissions it grants on a computer." ?
Learn more in our blog: https://t.co/uMcvJ5L5Fp https://t.co/QW4RCSBZYU

— Duo Security (@duosec) February 22, 2019

CRXcavator is "a much needed solution for a long-standing problem," says @helpnetsecurity.
Learn more in our blog: https://t.co/uMcvJ5L5Fp https://t.co/1jshkDTA19

— Duo Security (@duosec) February 22, 2019

"The problem we're trying to solve here is that it's really difficult for any individual or organization to look at any given Chrome extension & decide whether or not the risk that the extension brings is acceptable." —@schwascore
Learn more in our blog: https://t.co/uMcvJ5L5Fp https://t.co/AJxm1vpNL4

— Duo Security (@duosec) February 21, 2019

THIS IS HUGE especially for security review teams at gsuite orgshttps://t.co/nXr4eWuk1T

— Sarah Harvey (@worldwise001) February 21, 2019

Sysadmins can create a CRXcavator account, install the Chrome extension on their PCs in their fleet, and have report what extensions people have installed. They can later blackball or approve extensions based on their CRXcavator risk scores.

More here: https://t.co/rU9mhJueOJ

— Catalin Cimpanu (@campuscodi) February 21, 2019

Can you dig it? @duosec is excited to announce the public beta of CRXcavator, a free service that analyzes #Chrome extensions and produces comprehensive security reports. https://t.co/qr2LoT1v4x@duo_labs #infographic #cybersecurity #mfa #2fa pic.twitter.com/UJVohmWA7c

— ᔕѵϵɴ Ƙυϯɀϵʀ (@SvenKutzer) February 21, 2019

CRXcavator is a free service that analyzes Chrome extensions and produces comprehensive security reports https://t.co/rTaxvn2qdK

— ցҽҽҟղìҟ Ӏąҍʂ (@geeknik) February 21, 2019