Anthropic won't patch Claude Dispatch flaw for remote code execution
Browser extensions can hijack Claude Dispatch to run code on user machines or other signed-in devices without exploits.
Stories per day · 30 days
5 RSS
Relatedanthropic2claude2agentic-ai1agent-security1chatgpt1chrome1claude-desktop1dispatch1google1longitudinal-study1openai1panel-data1privacy1remote-code-execution1web-browsing1
26 stories, newest first · one card per story
Stories tagged #browser-extension
GESIS Surf: Open-Source Infrastructure for Privacy-Preserving Web Browsing Data Collection
GESIS Surf browser extension and backend enable large-scale, opt-in web behavioral data collection with built-in privacy controls.
ChatGPT can peek at your Chrome tabs now
OpenAI's ChatGPT Chrome extension can now read open tabs and control the browser for forms, messages, and downloads.
Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases
Sixteen malicious Firefox extensions impersonated crypto wallets and stole recovery phrases via Cloudflare Workers.
3
16 Malicious Firefox Extensions Impersonate Crypto Wallets to Steal Seed Phrases and Private Keys
Sixteen malicious Firefox extensions impersonating Rabby and OKX crypto wallets stole seed phrases and private keys, exfiltrating them to attacker-controlled Cloudflare Workers.
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
CERT-UA says UAC-0277 used fake Cloudflare checks on over 100 sites to deliver LunexStealer.
8
In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
Weekly roundup: iCloud spoofing bugs bypass SPF/DKIM/DMARC, TA419 spies phish AI policy experts, Cloudflare fixes cross-tenant data leak, Poper Blocker harvests AI chats.
LastPass warns employees before they share sensitive data with AI tools
LastPass expands Business Max with AI Monitoring & Protect, discovering shadow AI use and warning employees before sharing sensitive data with AI tools.
1
Fake VPN Extensions Hijack Browser Traffic Through Hidden Proxy Servers
Thirty-one fake Chrome VPN extensions, with about 356,000 installs, route browser traffic through attacker-controlled proxies.
4
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
A Chrome Web Store ad blocker called Poper Blocker exfiltrates sensitive data and was downloaded millions of times.
Researchers Identify AliExpress Phishing Domains Before Registration
EfficientIP flagged ten .cyou domains before registration that later led to an AliExpress phishing site.
2
New Browser Guard features add protection before and after you click
Malwarebytes Browser Guard adds Search Reputation ratings and on-device LLM-powered Scam Guard Lite to block scams before and after clicking.
1
Fake Firefox Extension Hijacks Google Accounts Without Stealing Passwords First
A fake Firefox PDF extension steals Google oauth_token cookies and automates account takeover after install.
4
A Gmail-Based Phishing Detection Prototype for Nigerian Fintech Emails Using Sender Checks and BiLSTM Classification
A Gmail extension prototype detects Nigerian fintech phishing with sender checks and a BiLSTM classifier.
Hackers Hide Malware Servers on Blockchain to Steal Bank Logins and 2FA Codes
Malware operators hide C2 in Polygon blockchain contracts via EtherHiding, delivering a browser-based banking trojan that steals bank logins and 2FA codes from 479 sites.
3
BragJack Attack Hijacks AI Assistants in 5 Popular Browsers With Zero Clicks
Researchers disclosed BragJack, a zero-click extension attack hijacking AI assistants in Chrome, Edge, Opera, Comet, and Claude.
5
Malware bypasses browser checks to force install Chrome, Edge extensions
Elastic Security Labs detailed KREMLIN, a Brazilian banking malware that silently installs malicious Chrome and Edge extensions, with 1,515 confirmed infections.
3
KREMLIN Banking Malware Bypasses Chrome Security to Steal Banking Sessions
Elastic Security Labs details KREMLIN, a Brazilian banking malware that implants malicious Chrome and Edge extensions by forging Chromium integrity values to steal banking sessions.
1
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Elastic Security Labs details KREMLIN, Brazilian banking malware using malicious Chrome/Edge extensions and Ethereum smart contracts to steal credentials and session tokens.
2
Twitch extension with 30K installs exposes users’ OAuth tokens
Twitch extension with 30,000+ installs exfiltrates users' OAuth session tokens to Russian-run JeetBot proxy servers.
1
Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens
Malicious Twitch extension 'Twitch Enhanced Viewer | JeetBot' forwarded live OAuth session tokens of roughly 31,000 users to Russian JeetBot proxy servers.
1
Malicious Twitch Extension Exposes OAuth Tokens of 30,000 Chrome and Firefox Users
Malicious 'Twitch Enhanced Viewer | JeetBot' browser extension stole live OAuth session tokens from roughly 31,000 Chrome and Firefox users.
1
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
Malicious Twitch extension 'Twitch Enhanced Viewer | JeetBot' leaked OAuth tokens from nearly 31,000 users to Russian bot-service proxy servers.
1
The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions
Elastic details KREMLIN, a Brazilian banking malware whose malicious Chrome/Edge extension forges Chromium integrity checks to steal sessions.
2