A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines.
Search
Find a quick tip
Results for "Extensions".
Chrome extensions with 13.4 million installs caught hijacking searches
A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users' searches through tracking servers to generate advertising revenue from Bing and Yahoo. [.
BragJack attacks hijack AI browser agents through malicious extensions
BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension.
Microsoft Teams will let admins block custom file extensions
Microsoft Teams will soon let administrators tweak the list of file extensions commonly associated with security threats to meet their company's security requirements.
Malware bypasses browser checks to force install Chrome, Edge extensions
A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data.
Chrome Web Store extensions caught stealing crypto, browser data
Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurrency, sensitive data, and browser history, as well as inject ClickFix lures.
Hundreds of fake Chrome VPN extensions route traffic through a proxy
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a single provider.
Google Chrome may soon block New Tab hijacker extensions by default
Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or changing the default search engine.
Claude Chrome extension flaw lets malicious extensions trigger AI actions
A flaw in Anthropic's Claude for Chrome browser extension could allow a malicious extension to trigger predefined AI actions by simulating user clicks, potentially allowing it to abuse Claude's access to connected services such as Gmail.
CISA warns of actively exploited RCE flaws in Joomla extensions
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are exploiting vulnerabilities in the iCagenda and Balbooa Forms extensions for Joomla to achieve remote code execution through arbitrary file.
Google is finally banning Chrome extensions that let you jailbreak chatbots
Google gives Chrome extension developers a month to meet new.
Browser extensions: to start today
A practical, in-depth guide on Browser extensions: to start today with concrete technical steps, security configurations and verification methods.
Browser extensions: with a safe checklist
A practical, in-depth guide on Browser extensions: with a safe checklist with concrete technical steps, security configurations and verification methods.
Browser extensions: for common issues
A practical, in-depth guide on Browser extensions: for common issues with concrete technical steps, security configurations and verification methods.
Browser extensions: to improve performance
A practical, in-depth guide on Browser extensions: to improve performance with concrete technical steps, security configurations and verification methods.
Browser extensions: to organize your routine
A practical, in-depth guide on Browser extensions: to organize your routine with concrete technical steps, security configurations and verification methods.
Browser extensions: before changing devices
A practical, in-depth guide on Browser extensions: before changing devices with concrete technical steps, security configurations and verification methods.
Browser extensions: for remote work
A practical, in-depth guide on Browser extensions: for remote work with concrete technical steps, security configurations and verification methods.
Browser extensions: on a low budget
A practical, in-depth guide on Browser extensions: on a low budget with concrete technical steps, security configurations and verification methods.
Browser extensions: without overcomplicating it
A practical, in-depth guide on Browser extensions: without overcomplicating it with concrete technical steps, security configurations and verification methods.
Browser extensions: for a monthly review
A practical, in-depth guide on Browser extensions: for a monthly review with concrete technical steps, security configurations and verification methods.
Switching from Google Chrome to Firefox: A Week of Privacy and Functionality
I ditched Google Chrome for Firefox for a week and discovered its privacy benefits and improved functionality, ultimately finding it a more reliable browser choice.
Snapseed Expands Image Quality and Exif Controls for Enhanced Editing
Snapseed introduces finer controls for image quality and Exif data, allowing users to customize export and save options.
CTM360 Reveals the Deceptive Tactics of Fake Gift Card Scams
CTM360 exposes a global scam exploiting trusted brands, tricking users into fake reward systems.
Cursor VS Code Extension Malware Incident: Understanding the Attack and Mitigation Steps
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's marketplace, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors.
How to Safely Use AI Agents and Protect Your Data
AI agents are becoming more autonomous and capable, but they also pose significant risks. Learn how to use them safely and protect your data with Gen's Agent Trust Hub.
Mastering ClickFix and InstallFix: A Comprehensive Guide to AI Lures and Phishing Attacks
ClickFix and InstallFix have become increasingly prevalent in recent years, targeting users searching for AI tools. This guide provides actionable tips and recommendations to protect against these lures and phishing attacks.
How to Protect Your Devices from Zero-Click Ad-Embedded Spyware Attacks
Citizen Labs recently uncovered a sophisticated zero-click attack that delivered Candiru spyware through targeted online ads. Here’s how to protect your devices from similar threats.
Snapseed's Upcoming Erase Tool: An AI-Powered Solution for Removing Objects from Photos
Snapseed is developing a new Erase tool that could use AI for object removal, offering a potential upgrade to its existing Healing tool.
The Future of Domain Names: From Cats to Porn and Beyond
ICANN's upcoming domain name applications could lead to a plethora of new extensions, including those related to controversial topics like porn and adult content.