Most of us spend a lot of time inside a web browser. If you're a Chrome, Firefox, or Edge user, then you'll know these browsers come with a huge number of third-party extensions to augment the ...

Learn how the ShadyPanda campaign turned trusted browser extensions into spyware and the steps security teams can take to reduce extension risk.

Security researchers say a popular Chrome extension with millions of users was collecting AI chatbot conversations. Here’s ...

Browser extensions with more than 8 million installs are harvesting complete and extended conversations from users’ AI ...

A Chrome browser extension with 6 million users, as well as seven other Chrome and Edge extensions, for months have been silently collecting data from every AI chatbot conversion, packaging it, and ...

Malicious Chrome and Edge extensions collected browsing history, keystrokes and personal data from millions of users before ...

Malicious extensions occasionally find their way into the Chrome Web Store (and similar libraries in other browsers) by posing as legitimate add-ons. Some of them only morph into malware after gaining ...

A Christmas Eve phishing attack resulted in an unknown party taking over a Cyberhaven employee's Google Chrome Web Store account and publishing a malicious version of Cyberhaven's Chrome extension.

A privacy-focused Chrome extension installed by more than seven million people worldwide has gone rogue and is stealing your ...

Urban VPN Proxy, which claims to protect users' privacy, collects data from conversations with ChatGPT, Claude, Gemini, ...

A Google Chrome extension with a "Featured" badge and six million users has been observed silently gathering every prompt ...

Virtual private networks, or VPNs, are an essential tool for those looking to privately and securely use the internet. They encrypt your online traffic and hide your true IP address from would-be ...