Chrome to block extensions that hijack new tab page
Google is developing a new security feature for the Chrome browser to prevent malicious extensions from hijacking the 'New Tab' page. The update aims to block extensions that exploit enterprise policy keys to force-install themselves on unmanaged personal devices.
Why it matters
This update addresses a common security vulnerability that allows malware to bypass user control and manipulate browser settings.
Home News World Sports Entertainment Science Royal Trending Health Videos Technology Technology Chrome to block extensions that hijack new tab page With Chrome activated, it will block the installation of policy-controlled extensions trying to change New Tab page
Anyone who's opened Chrome to a hijacked homepage and a baffling "Managed by your organisation" message on a personal computer may finally get relief.
Chrome lets organisations use enterprise policies to force-install extensions on managed work devices, a legitimate tool for domain-connected or MDM-controlled PCs.
This same method has been exploited by malicious software in order to silently install local policy keys to install the extension, which will then be able to take control of the New Tab page, change the default search engine and perform redirects to questionable websites.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in