Malware & Threats
Published through five accounts, the extensions appear part of a coordinated campaign based on shared C&C infrastructure.
Hi, what are you looking for?
SecurityWeek
All posts tagged "browser extension"
Artificial Intelligence
Malicious extensions could hijack the Gemini Live in Chrome feature to spy on users and steal their files.
Artificial Intelligence
Marketed as ChatGPT enhancement and productivity tools, the extensions allow the threat actor to access the victim's ChatGPT data.
Malware & Threats
Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity.
Malware & Threats
The extensions were seen profiling users, reading cookie data to create unique identifiers, and executing payloads with browser API access.
Data Protection
All new extensions will be required to declare their data collection practices in their manifest file using a specific key.
Identity & Access
Researchers at enterprise browser security firm SquareX showed how an attacker can impersonate a user and bypass passkey security.
Artificial Intelligence
LayerX has disclosed an AI chatbot hacking method via web browser extensions it has named ‘man-in-the-prompt’.
Cybercrime
Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple customers.
Supply Chain Security
Vulnerabilities
Vulnerabilities
Artificial Intelligence
Application Security
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Artificial Intelligence
Fraud & Identity Theft
Supply Chain Security
