The Password Alert extension for Google Chrome had been bypassed by a simple exploit, just 24 hours after Google had rolled out the Chrome plugin.
Within hours of publication, Google issued an update that blocked the exploit.
Now the same researcher has figured out a way to block the new version, too.
Full read.