The suspected PLA hackers are back in action.

It’s the third previously unknown vulnerability that Chrome has addressed this year.

Both vulnerabilities could allow hackers to escape the “sandboxes” that software programs use as safeguards against malicious activity.

Automation can help with the laborious but important work of tracking the third-party code used by extensions.

Google is also expanding the Google Play Security Reward Program to include remote code executions on popular apps. Rewards range from $1,000 to $5,000.

The browser extension has access to virtually everything a user types and therefore an attacker could access a huge trove of private data.