Browser Security

GhostPoster Malware Campaign: 17 Malicious Browser Extensions Hit Chrome, Edge, and Firefox With 840,000+ Installs

LayerX linked 17 browser extensions across Chrome, Edge, and Firefox to the GhostPoster campaign. Th...

Google Chrome Adds a Toggle to Disable On-Device GenAI Used for Scam Detection

Credential-Stealing Chrome Extensions Target Workday, NetSuite, and SAP SuccessFactors in Enterprise Account Hijacking Campaign

A new wave of credential-stealing Chrome extensions is targeting enterprise HR and ERP platforms in ...

Reprompt attack showed how a single click could silently siphon data from Microsoft Copilot Personal sessions

Security researchers disclosed "Reprompt," a single click prompt injection chain that could quietly ...

GhostPoster Browser Extensions: 17 Malicious Add-ons Reached 840,000 Installs Across Chrome, Edge, and Firefox

A fresh set of GhostPoster browser extensions has been discovered across the Chrome Web Store, Micro...

Reprompt attack exposed a one-click path to hijack Microsoft Copilot sessions

The Reprompt attack combined URL-prefilled prompts with session persistence to hijack Microsoft Copi...

Phantom Shuttle: Fake VPN Chrome Extensions Steal Credentials from 170+ High-Value Domains

Two identically-named Chrome extensions masquerading as legitimate VPN services have been secretly i...