A new cyber threat dubbed the “Cookie-Bite” attack has once again exposed the vulnerabilities in cloud-based authentication systems…

In today’s digital age, a reliable web browser is essential for smooth, secure, and efficient browsing. Whether you’re working online…

Hello gusy! This was my first real attempt at digging into Chrome extensions. No bounty in mind, no target list, just curiosity. I…

Unlocking Hidden Attack Surfaces in the Most Overlooked Corner of Web Security

How the Mellowtel library transforms browser extensions into a distributed web scraping network, making nearly one million devices an…

ReversingLabs exposes a supply chain compromise of the VS Code ETHcode extension via two lines of malicious code in a GitHub PR, leading to malware deployment.

A Russian crypto developer lost $500K after installing a fraudulent "Solidity Language" extension for Cursor AI IDE from Open VSX, which deployed malware for remote access and data theft.

Imagine this: You’re a seasoned blockchain developer, meticulous with your security, working on a freshly installed system. You’re using…

Koi Security’s research team has unveiled GreedyBear, a threat group orchestrating industrial-scale cryptocurrency theft through a seamless blend of browser extensions, malware executables, and fr…

Enhancer for YouTube, a popular extension with 600K+ users, is leaving Firefox. The developer cites a "deeply unpleasant" and slow review process.

MailFail is a Firefox browser extension that identifies and provides commands to exploit a large number of email-related misconfigurations for the current domain and subdomain. The extension's UI popup highlights any misconfigurations in red and links to…

Mozilla has launched a new feature for Firefox Add-ons, allowing developers to quickly roll back to a previous version to fix critical bugs or security issues.