Security researchers have revealed a zero-click attack technique known as BragJack, which could enable a malicious browser extension to hijack…
A critical access control vulnerability in the Vatican’s official “Click to Pray” platform has exposed the personal data of more…
LayerX security researchers have uncovered a massive, highly coordinated campaign involving at least 12 malicious browser extensions on the Google…
The OWASP Zed Attack Proxy (ZAP) just received a massive upgrade for testing modern web applications. The release of the…
Socket’s Threat Research Team has uncovered a highly deceptive Google Chrome extension designed to steal private keys and seed phrases…
Security researchers at Zenity Labs disclosed a critical flaw in Perplexity’s Comet “agentic” browser that allowed attackers to steal local…
Threat intelligence researchers at Huntress have uncovered a sophisticated browser extension campaign orchestrated by the KongTuke threat actor group, featuring…
Security researchers at Cato CTRL have uncovered HashJack. This innovative indirect prompt-injection attack hides harmful commands in the fragment portion…
Mozilla has announced a significant transparency initiative for its Firefox browser ecosystem, implementing mandatory data disclosure requirements for extension developers.…
A new study has uncovered a method for silently installing custom extensions on Chromium-based browsers running in Windows domain environments.…