Browser Extension

News

Fake ad blocker extension crashes the browser for ClickFix attacks

A malvertising campaign is using a fake ad-blocking Chrome and Edge extension named NexShield that intentionally crashes...
News

クレデンシャルを盗むChrome拡張機能、企業の人事プラットフォームを標的に

企業の人事およびERPプラットフォーム向けの生産性向上ツールやセキュリティ・ツールを装った悪質なChrome拡張機能がChrome Web Store上に存在し、認証情報を盗んだり、セキュリティ・インシデントに対応するための管理ページをブロ...
News

悪質なGhostPosterブラウザ拡張機能、84万インストール見つかる

GhostPosterキャンペーンに関連する別の17の悪意のある拡張機能のセットが、Chrome、Firefox、Edgeのストアで発見され、合計84万インストールが蓄積された。 GhostPosterキャンペーンは、12月にKoi Sec...
News

Zoom Stealer browser extensions harvest corporate meeting intelligence

A newly discovered campaign, which researchers call Zoom Stealer, is affecting 2.2 million Chrome, Firefox, and Microsof...
News

Trust Wallet says 2,596 wallets drained in $7 million crypto theft attack

Trust Wallet says attackers who compromised its browser extension right before Christmas have drained approximately $7 m...
News

The Real-World Attacks Behind OWASP Agentic AI Top 10

OWASP just released the Top 10 for Agentic Applications 2026 - the first security framework dedicated to autonomous AI a...
News

GhostPoster attacks hide malicious JavaScript in Firefox addon logos

A new campaign dubbed 'GhostPoster' is hiding JavaScript code in the image logo of malicious Firefox extensions with mor...
News

ShadyPanda browser extensions amass 4.3M installs in malicious campaign

A long-running malware operation known as "ShadyPanda" has amassed over 4.3 million installations of seemingly legitimat...
News

Microsoft Edge to block malicious sideloaded extensions

Microsoft is planning to introduce a new Edge security feature that will protect users against malicious extensions side...
News

Mozilla now lets Firefox add-on devs roll back bad updates

Mozilla has announced a new feature that enables Firefox extension developers to roll back to previously approved versio...