LayerX found "sleeper agent" Chrome extensions, installed on 1.5M devices, disguised as audio tools but capable of remote command execution and data theft.

LayerX disclosed CometJacking, a critical flaw that exploits a single crafted link to silently hijack Perplexity Comet’s AI agent, stealing Gmail and Calendar data.

A LayerX report reveals 77% of employees paste sensitive data (PII, PCI) into ChatGPT, with 82% of activity from unsecured personal accounts, creating a massive blind spot for enterprise security.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

LayerX exposed a 6-year, 9M-install campaign: Fake VPN/ad-blocking Chrome extensions hijack all user traffic via remote PAC proxy scripts, enabling surveillance and data exfiltration.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

LayerX exposes 30+ malicious AI extensions spying on 260,000 users. These "privileged proxies" steal Gmail data & page content. Uninstall now.

Claude Code can be manipulated via CLAUDE.md to bypass safeguards and execute SQL injection attacks, enabling credential theft, says LayerX.

Over 130,000 users are at risk from fake TikTok downloader extensions on Chrome and Microsoft Edge with scammers spying and stealing user data.

LayerX unmasks 12 TikTok downloader extensions tracking 130,000+ users. Even "Featured" tools can be traps. Learn how this resilient malware ecosystem works.

LayerX research finds 82 Chrome extensions collecting and selling user data, affecting at least 6.5 million users through disclosed but concerning practices.