100 Chrome Extensions Steal User Data, Create Backdoor 2026-04-15 at 16:34 By Ionut Arghire Published through five accounts, the extensions appear part of a coordinated campaign based on shared C&C infrastructure. The post 100 Chrome Extensions Steal User Data, Create Backdoor appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
100 Chrome Extensions Steal User Data, Create Backdoor Read More »
Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant 2026-03-02 at 17:46 By Ionut Arghire Malicious extensions could hijack the Gemini Live in Chrome feature to spy on users and steal their files. The post Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant Read More »
Chrome, Edge Extensions Caught Stealing ChatGPT Sessions 2026-01-27 at 15:49 By Ionut Arghire Marketed as ChatGPT enhancement and productivity tools, the extensions allow the threat actor to access the victim’s ChatGPT data. The post Chrome, Edge Extensions Caught Stealing ChatGPT Sessions appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chrome, Edge Extensions Caught Stealing ChatGPT Sessions Read More »
Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats 2026-01-07 at 17:35 By Ionut Arghire Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity. The post Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats Read More »
Chrome, Edge Extensions Caught Tracking Users, Creating Backdoors 2025-12-02 at 16:35 By Ionut Arghire The extensions were seen profiling users, reading cookie data to create unique identifiers, and executing payloads with browser API access. The post Chrome, Edge Extensions Caught Tracking Users, Creating Backdoors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Chrome, Edge Extensions Caught Tracking Users, Creating Backdoors Read More »
New Firefox Extensions Required to Disclose Data Collection Practices 2025-10-27 at 14:32 By Ionut Arghire All new extensions will be required to declare their data collection practices in their manifest file using a specific key. The post New Firefox Extensions Required to Disclose Data Collection Practices appeared first on SecurityWeek. This article is an excerpt
New Firefox Extensions Required to Disclose Data Collection Practices Read More »
Passkey Login Bypassed via WebAuthn Process Manipulation 2025-08-14 at 12:21 By Eduard Kovacs Researchers at enterprise browser security firm SquareX showed how an attacker can impersonate a user and bypass passkey security. The post Passkey Login Bypassed via WebAuthn Process Manipulation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Passkey Login Bypassed via WebAuthn Process Manipulation Read More »
Browser Extensions Pose Serious Threat to Gen-AI Tools Handling Sensitive Data 2025-07-31 at 15:07 By Eduard Kovacs LayerX has disclosed an AI chatbot hacking method via web browser extensions it has named ‘man-in-the-prompt’. The post Browser Extensions Pose Serious Threat to Gen-AI Tools Handling Sensitive Data appeared first on SecurityWeek. This article is an excerpt
Browser Extensions Pose Serious Threat to Gen-AI Tools Handling Sensitive Data Read More »