A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines.
Search
Find a quick tip
Results for "Extension".
Cursor VS Code Extension Malware Incident: Understanding the Attack and Mitigation Steps
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's marketplace, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors.
Chrome extensions with 13.4 million installs caught hijacking searches
A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users' searches through tracking servers to generate advertising revenue from Bing and Yahoo. [.
This Browser Extension Lets You Snooze Open Tabs Until Later
The free add-on Tuck brings one of the best features of modern email—the ability to hide something for a bit—to that tangle of tabs in your.
BragJack attacks hijack AI browser agents through malicious extensions
BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension.
Microsoft Teams will let admins block custom file extensions
Microsoft Teams will soon let administrators tweak the list of file extensions commonly associated with security threats to meet their company's security requirements.
Malware bypasses browser checks to force install Chrome, Edge extensions
A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data.
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
Chrome Web Store extensions caught stealing crypto, browser data
Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurrency, sensitive data, and browser history, as well as inject ClickFix lures.
Critical RCE flaw in Windows IKE Extension now actively exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote code execution (RCE) flaw in the Windows Internet Key Exchange (IKE) Service Extensions component.
Chrome just flagged a hugely popular extension as unsafe
The warning looks serious, but the developer says the issue has nothing to do.
Hundreds of fake Chrome VPN extensions route traffic through a proxy
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a single provider.
Open VSX Marketplace Extension Security Analysis: A Deep Dive into the Manifold Security Incident
Manifold Security identified 77 Open VSX marketplace extensions that impersonated legitimate developer tools, transmitting detailed information about systems and development environments where they were installed.
Google Chrome may soon block New Tab hijacker extensions by default
Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or changing the default search engine.
Adobe Chrome extension flaw let sites access private WhatsApp chats
The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any form of authentication.
Claude Chrome extension flaw lets malicious extensions trigger AI actions
A flaw in Anthropic's Claude for Chrome browser extension could allow a malicious extension to trigger predefined AI actions by simulating user clicks, potentially allowing it to abuse Claude's access to connected services such as Gmail.
CISA warns of actively exploited RCE flaws in Joomla extensions
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are exploiting vulnerabilities in the iCagenda and Balbooa Forms extensions for Joomla to achieve remote code execution through arbitrary file.
Google is finally banning Chrome extensions that let you jailbreak chatbots
Google gives Chrome extension developers a month to meet new.
Fake Perplexity extension on Chrome Web Store tracked searches
A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search traffic and collecting browsing information.
Malicious Edge extension abuses Native Messaging as bridge to malware
A malicious Microsoft Edge extension dubbed 'Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor.
This free YouTube Music extension is the block feature you have been begging Google for
You can finally mute unwanted artists and tracks from your music streaming.
Browser extensions: to start today
A practical, in-depth guide on Browser extensions: to start today with concrete technical steps, security configurations and verification methods.
Browser extensions: with a safe checklist
A practical, in-depth guide on Browser extensions: with a safe checklist with concrete technical steps, security configurations and verification methods.
Browser extensions: for common issues
A practical, in-depth guide on Browser extensions: for common issues with concrete technical steps, security configurations and verification methods.
Browser extensions: to improve performance
A practical, in-depth guide on Browser extensions: to improve performance with concrete technical steps, security configurations and verification methods.
Browser extensions: to organize your routine
A practical, in-depth guide on Browser extensions: to organize your routine with concrete technical steps, security configurations and verification methods.
Browser extensions: before changing devices
A practical, in-depth guide on Browser extensions: before changing devices with concrete technical steps, security configurations and verification methods.
Browser extensions: for remote work
A practical, in-depth guide on Browser extensions: for remote work with concrete technical steps, security configurations and verification methods.
Browser extensions: on a low budget
A practical, in-depth guide on Browser extensions: on a low budget with concrete technical steps, security configurations and verification methods.
Browser extensions: without overcomplicating it
A practical, in-depth guide on Browser extensions: without overcomplicating it with concrete technical steps, security configurations and verification methods.