extension

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

Cursor, extension, Malware & Threats, supply chain attack, Supply Chain Security /

Malicious Claude Code Extension Served in Cursor Supply Chain Attack 2026-11-02 at 13:29 By Ionut Arghire The extension performed host reconnaissance and attempted to create a reverse SSH tunnel. The post Malicious Claude Code Extension Served in Cursor Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Malicious Claude Code Extension Served in Cursor Supply Chain Attack Read More »

Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities

AI sidebar, Chrome, data theft, extension, fraud, Malware & Threats /

Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities 2026-08-11 at 14:15 By Eduard Kovacs The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data. The post Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities appeared first on SecurityWeek. […]

Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities Read More »

Vercel breached via compromised third-party AI tool

breach, data theft, Don't miss, extension, Hot stuff, News, third party compromise, Vercel /

Vercel breached via compromised third-party AI tool 2026-04-20 at 18:12 By Zeljka Zorz Cloud deployment and hosting platform Vercel has suffered a security breach that resulted in attackers accessing some of its internal systems and compromising Vercel credentials of a “limited subset of customers”. Advice for affected customers “The incident originated with a compromise of […]

Vercel breached via compromised third-party AI tool Read More »

100 Chrome Extensions Steal User Data, Create Backdoor

backdoor, browser extension, Chrome extension, extension, Malware & Threats /

100 Chrome Extensions Steal User Data, Create Backdoor 2026-04-15 at 16:34 By Ionut Arghire Published through five accounts, the extensions appear part of a coordinated campaign based on shared C&C infrastructure. The post 100 Chrome Extensions Steal User Data, Create Backdoor appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

100 Chrome Extensions Steal User Data, Create Backdoor Read More »

Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant

AI, Artificial Intelligence, browser extension, Chrome, extension, Vulnerabilities, vulnerability /

Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant 2026-03-02 at 17:46 By Ionut Arghire Malicious extensions could hijack the Gemini Live in Chrome feature to spy on users and steal their files. The post Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant Read More »

Chrome, Edge Extensions Caught Stealing ChatGPT Sessions

Artificial Intelligence, browser extension, ChatGPT, Chrome, extension, Malware & Threats /

Chrome, Edge Extensions Caught Stealing ChatGPT Sessions 2026-01-27 at 15:49 By Ionut Arghire Marketed as ChatGPT enhancement and productivity tools, the extensions allow the threat actor to access the victim’s ChatGPT data. The post Chrome, Edge Extensions Caught Stealing ChatGPT Sessions appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome, Edge Extensions Caught Stealing ChatGPT Sessions Read More »

Fake browser crash alerts turn Chrome extension into enterprise backdoor

browser, Chrome, Chrome Web Store, Don't miss, enterprise, extension, Hot stuff, Huntress, Microsoft Edge, News, Remote Access Trojan, social engineering, Socket /

Fake browser crash alerts turn Chrome extension into enterprise backdoor 2026-01-19 at 17:21 By Zeljka Zorz Browser extensions are a high-risk attack vector for enterprises, allowing threat actors to bypass traditional security controls and gain a foothold on corporate endpoints. Case in point: A recently identified malicious extension called NexShield proves that a single user […]

Fake browser crash alerts turn Chrome extension into enterprise backdoor Read More »

Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats

browser extension, Chrome, data theft, extension, Malware & Threats /

Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats 2026-01-07 at 17:35 By Ionut Arghire Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity. The post Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats Read More »

GhostPoster Firefox Extensions Hide Malware in Icons

extension, Firefox, GhostPoster, Malware, Malware & Threats /

GhostPoster Firefox Extensions Hide Malware in Icons 2025-12-17 at 12:47 By Ionut Arghire The malware hijacks purchase commissions, tracks users, removes security headers, injects hidden iframes, and bypasses CAPTCHA. The post GhostPoster Firefox Extensions Hide Malware in Icons appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

GhostPoster Firefox Extensions Hide Malware in Icons Read More »

AI Sidebar Spoofing Puts ChatGPT Atlas, Perplexity Comet and Other Browsers at Risk

AI, Artificial Intelligence, browser, ChatGPT Atlas, extension, Featured, Perplexity Comet /

AI Sidebar Spoofing Puts ChatGPT Atlas, Perplexity Comet and Other Browsers at Risk 2025-10-23 at 17:10 By Eduard Kovacs SquareX has shown how malicious browser extensions can impersonate AI sidebar interfaces. The post AI Sidebar Spoofing Puts ChatGPT Atlas, Perplexity Comet and Other Browsers at Risk appeared first on SecurityWeek. This article is an excerpt […]

AI Sidebar Spoofing Puts ChatGPT Atlas, Perplexity Comet and Other Browsers at Risk Read More »

Data-stealing VS Code extensions removed from official Marketplace

Datadog, Don't miss, Ethereum, extension, Hot stuff, News, programming, VS Code, VS Code Marketplace /

Data-stealing VS Code extensions removed from official Marketplace 2025-05-21 at 16:19 By Zeljka Zorz Developers who specialize in writing smart (primarily Ethereum) contracts using the Solidity programming language have been targeted via malicious VS Code extensions that install malware that steals cryptocurrency wallet credentials. “Based on shared infrastructure and obfuscation characteristics, we attribute all three […]

Data-stealing VS Code extensions removed from official Marketplace Read More »

Browser backdoors: Securing the new frontline of shadow IT

browser, cybersecurity, Don't miss, Expert analysis, Expert corner, extension, Hexnode, Hot stuff, News, opinion, shadow IT /

Browser backdoors: Securing the new frontline of shadow IT 2024-08-13 at 07:31 By Help Net Security Browser extensions are a prime target for cybercriminals. And this isn’t just a consumer problem – it’s a new frontier in enterprises’ battle against shadow IT. Ultimately, more extension permissions result in potentially bigger attack surfaces. Research shows that […]

Browser backdoors: Securing the new frontline of shadow IT Read More »

Chrome, Edge users beset by malicious extensions that can’t be easily removed

add-ons, adware, Chrome, cybercrime, Don't miss, extension, Hot stuff, Malware, Microsoft Edge, News, Reason Labs /

Chrome, Edge users beset by malicious extensions that can’t be easily removed 2024-08-12 at 16:31 By Zeljka Zorz A widespread campaign featuring a malicious installer that saddles users with difficult-to-remove malicious Chrome and Edge browser extensions has been spotted by researchers. “The trojan malware contains different deliverables ranging from simple adware extensions that hijack searches […]

Chrome, Edge users beset by malicious extensions that can’t be easily removed Read More »

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb

ad, cookies, data breach, Don't miss, extension, Hot stuff, Malware, News, Product showcase, Surfshark, trackers /

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb 2024-05-16 at 07:01 By Help Net Security A study by PageFair revealed that ad blocker usage surged by 30% in 2016 alone, reflecting a growing public concern for privacy and uninterrupted browsing. Fast-forward to today, and the numbers are even more dramatic. According to Forbes, Americans […]

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb Read More »

Product showcase: LayerX browser security extension

browser, Don't miss, extension, Hot stuff, LayerX, News, Product showcase, software /

Product showcase: LayerX browser security extension 01/11/2023 at 08:32 By Help Net Security The browser has become the main workspace in modern organizations. It’s where employees create and interact with data, and how they access organizational and external SaaS and web apps. That’s why the browser is extensively targeted by adversaries. They seek to steal […]

Product showcase: LayerX browser security extension Read More »

Chrome will tell users when extensions they use are removed from Chrome Web Store

browser, Chrome, Chrome Web Store, Don't miss, extension, Google, Hot stuff, News /

Chrome will tell users when extensions they use are removed from Chrome Web Store 21/08/2023 at 13:33 By Helga Labus Google will be extending the Safety check feature within the Chrome browser to alert users when a previously installed extension is no longer available in the Chrome Web Store. A safety check for Chrome extensions […]

Chrome will tell users when extensions they use are removed from Chrome Web Store Read More »

Scroll to Top