Browser extensions have become indispensable tools in our daily digital interactions, enhancing productivity and user experience. However…

A new cyber threat dubbed the “Cookie-Bite” attack has once again exposed the vulnerabilities in cloud-based authentication systems…

In today’s digital age, a reliable web browser is essential for smooth, secure, and efficient browsing. Whether you’re working online…

Hello gusy! This was my first real attempt at digging into Chrome extensions. No bounty in mind, no target list, just curiosity. I…

Unlocking Hidden Attack Surfaces in the Most Overlooked Corner of Web Security

How the Mellowtel library transforms browser extensions into a distributed web scraping network, making nearly one million devices an…

ReversingLabs exposes a supply chain compromise of the VS Code ETHcode extension via two lines of malicious code in a GitHub PR, leading to malware deployment.

A Russian crypto developer lost $500K after installing a fraudulent "Solidity Language" extension for Cursor AI IDE from Open VSX, which deployed malware for remote access and data theft.

Imagine this: You’re a seasoned blockchain developer, meticulous with your security, working on a freshly installed system. You’re using…

Koi Security’s research team has unveiled GreedyBear, a threat group orchestrating industrial-scale cryptocurrency theft through a seamless blend of browser extensions, malware executables, and fr…