OX Security reveals how malicious Chrome extensions exposed AI chats from ChatGPT and DeepSeek, silently siphoning sensitive ...

Browser extensions turned malicious after years of legitimate operation in DarkSpectre campaign affecting millions. The ...

Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, ...

Chrome extensions called "Phantom Shuttle" stole user data for years before Google removed them from the Chrome Web Store ...

Security researchers found two Chrome extensions with 900,000 installs secretly collecting ChatGPT and DeepSeek chats and ...

Zoom users should exercise extreme caution when installing browser extensions, particularly those claiming Zoom-related ...

Two Chrome extensions in the Web Store named 'Phantom Shuttle' are posing as plugins for a proxy service to hijack user traffic and steal sensitive data. Both extensions are still present in Chrome's ...

Browser extensions with more than 8 million installs are harvesting users’ complete and extended AI conversations and selling them for marketing purposes, according to data collected from the Google ...

A popular browser extension that acts as a VPN to protect users' privacy is actually harvesting and facilitating the sale of data from conversations with AI chatbot assistants. While versions previous ...

A long-running malware campaign quietly evolved over several years and turned trusted Chrome and Edge extensions into spyware. A detailed report from Koi Security reveals that the ShadyPanda operation ...

Urban VPN Proxy began harvesting AI chatbot prompts and responses after a July 2025 update Collected data, including metadata and conversation IDs, is shared with BIScience for ad analytics Several ...