Cyberhaven

Steven Lim

@0x534c

𝗦𝗲𝗰𝘂𝗿𝗲 𝗔𝗻𝗻𝗲𝘅 - 𝗦𝗲𝘃𝗲𝗿𝗮𝗹🌐𝗖𝗵𝗿𝗼𝗺𝗲 𝗘𝘅𝘁𝗲𝗻𝘀𝗶𝗼𝗻 𝗖𝗼𝗺𝗽𝗿𝗼𝗺𝗶𝘀𝗲𝗱 The Cyberhaven browser extension was compromised in late December 2024 after attackers hijacked an administrator account and pushed a malicious update. The malicious code exfiltrated sensitive data such as cookies, sessions, and API keys to attacker-controlled domains. Multiple other Chrome extensions were found to be compromised in similar ways, pointing to a broader campaign that began months earlier. Organizations are advised to rotate credentials, clear sessions, and review logs for suspicious activity. https://t.co/gImeXXyoWa The above KQL code will help defender check if any of these chrome extensions are installed on your MDE endpoints and get the impacted user to rotate their credentials if necessary.🫡 #Cybersecurity #RiskyExtension #DefenderXDR #ThreatHunting

Antonio Grasso

@antgrasso

AI is accelerating data exposure. The Cyberhaven Winter 2026 Launch explains why DSPM and DLP work better together, with concrete scenarios and a live view of an integrated data protection approach. Register here > https://t.co/7jwi7Wy8AJ @CyberhavenInc Partner. https://t.co/RXTjanFYdy

solst/ICE of Astarte

@IceSolst

Ad fraud is a lucrative business. There was a recent phishing campaign that targeted chrome extension owners. They’d push changes to steal Facebook business cookies for this reason. Check out the cyberhaven story in my blog post: https://t.co/bpsIjuN5kA

Neo Kim

@systemdesignone

Load Balancer vs Reverse Proxy vs API Gateway (explained in 2 minutes or less): —— Every week, AI makes your team faster and your data more exposed. Files move into new tools. Models train on sensitive inputs. And traditional DLP is blind to the context that matters most. —— On 3 February at 11:00 AM PT, Cyberhaven is launching a unified DSPM + DLP platform. (It's built for the AI-native world, where data never sits still.) Join the live launch to see: • First public demo of our AI & data security platform. • How security teams get X-ray vision into real-time data usage. • A look ahead at what’s next in AI security, insider risk, and unified data protection. • Where legacy DLP & standalone DSPM break down and what top security leaders are doing instead. Don’t wait for the next AI breach to expose the cracks. —— 👋 Register now to see how unified DSPM + DLP changes the game: → https://t.co/8sL55ytUdx ——— 💾 Save this for later & RT it to help others become good software engineers. 👤 Follow @systemdesignone + turn on notifications.

Cristian Zamfir

Co-founder

Co-founder; one of five EPFL PhD researchers who started Cyberhaven in 2016.

Howard Ting

Board Member & Former CEO

Led Cyberhaven as CEO from 2021 to 2025 and now sits on its board; previously held leadership roles at Zscaler, Palo Alto Networks, and Redis.