seen from United States
seen from United States
seen from China
seen from South Korea
seen from T1
seen from Malaysia
seen from China
seen from France
seen from Japan
seen from China
seen from Japan
seen from France
seen from Türkiye
seen from France
seen from Japan
seen from Japan
seen from China
seen from Australia
seen from China
seen from Japan
Claude Chrome Extension Flaw Lets Any Extension Take Over AI
A vulnerability in Anthropic’s Claude Chrome extension allows other browser extensions to inject prompts and fully control AI actions without proper identity checks. Attackers can exploit the flaw to access private data, manipulate cloud files, and trigger unauthorised actions through trusted extension messaging channels.
Source: LayerX
Read more: CyberSecBrief
Hundreds of Chrome Extensions Secretly Harvest Millions of Users’ Data
More than 300 browser extensions with tens of millions of installs quietly transmitted browsing histories, searches, and even Gmail data to external servers.
Source: SecurityWeek | Q Continuum
Read more: CyberSecBrief
That Chrome Extension Isn't a Colour Tool — It's Stealing Your Crypto Wallet
A fake imToken extension in the Chrome Web Store uses invisible Unicode lookalikes to impersonate the legitimate wallet brand, then silently funnels victims into a phishing flow engineered to steal seed phrases and private keys the moment they're typed.
Source: Socket
Read more: CyberSecBrief
Fake Ad Blockers Crash Browsers, Then Break In
A malicious Chrome extension deliberately crashes browsers to trick employees into running hidden commands that deploy remote access malware.
Source: Huntress
Read more: CyberSecBrief
Malicious Chrome Extension Hijacks Meta Business Data
A Chrome extension, CL Suite, secretly exfiltrates Meta Business Manager analytics, contact lists, and TOTP 2FA codes to attacker-controlled servers, bypassing advertised local processing.
Source: Socket
Read more: CyberSecBrief
