AVG's Chrome security add-on had a big security hole

The irony is off the charts.

Sponsored Links

Jon Fingas
December 29, 2015 10:39 PM
AVG's Chrome security add-on had a big security hole

You'd normally expect antivirus software to improve your web browser's security, but just the opposite was true for AVG until today. The company has fixed an exploit in its protective Chrome extension, WebTuneUp, that would let maliciously-coded websites compromise your PC to a "trivial" degree. It could read your email on the web, for example. AVG was quick about fixing the issue within days of getting a heads-up from Google, but there is a real concern that millions of people were vulnerable for considerably longer.

The discovery reinforces worries that antivirus makers are struggling to keep up with security issues, whether it's shielding you from attacks or vulnerabilities in their own code. Simply put, there's a ton of malware out there -- it's difficult to promise a completely airtight security solution, even if it's a relatively simple web add-on.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Popular on Engadget