#extensions


BragJack attacks hijack AI browser agents through malicious extensions

Sep 19, 2026 // 17:57

Security researcher Gal Weizman of Forever Security has disclosed a new attack technique that can hijack the AI assistants built into popular browsers using a […]

Microsoft Teams will let admins block custom file extensions

Sep 19, 2026 // 00:02

Microsoft Teams will soon let administrators tweak the list of file extensions commonly associated with malware and security threats to meet their company’s security requirements. […]

Malware bypasses browser checks to force install Chrome, Edge extensions

Sep 16, 2026 // 23:57

A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session […]

Chrome Web Store extensions caught stealing crypto, browser data

Aug 30, 2026 // 17:37

Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurrency, sensitive data, and browser history, and to […]

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

Aug 28, 2026 // 18:55

Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over the last six months and harbored […]

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

Aug 20, 2026 // 11:43

A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other […]

Hundreds of fake Chrome VPN extensions route traffic through a proxy

Aug 12, 2026 // 21:57

More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users’ traffic through SOCKS5 proxies operated […]

737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One

Aug 12, 2026 // 17:15

A massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access to blocked services with an […]

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Aug 10, 2026 // 18:41

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro (“solidity-pro”) that has been observed delivering a browser wallet […]

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Aug 5, 2026 // 12:54

A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting information about the systems and […]

1 2 3 … 7 Next