The Ethereum blog has just issued a warning on using the Mist browser. Due to loopholes in Chromium, Mist Browser Beta v0.9.3 and older versions should not be used to browse unsolicited pages. Malicious websites can potentially steal private keys. Users of Ethereum Wallet desktop applications are not at risk.
The Mist Browser is a tool for browsing and using decentralized applications. However, it is not completely independent – it’s based on the Electron project, which in turn is based on the open-source web browser Chromium. When Chromium updates, you need time to make the necessary changes first in Electron and then in Mist itself. The company downplayed the threat level, however, the degree of threat was already high.
More:
https://dowbit.com/security-alert-a-loophole-in-the-blockchain-ethereum-mist/
