Experts warn Claude Chrome extension could let hackers hijack your online browsing

Prompt injection attacks can now be carried out in browser extensions, experts warn.
Hosted on MSN

Chrome extension disguised as AI assistant expose 10K+ users OpenAI API keys

A Chrome browser extension posing as an artificial intelligence assistant is siphoning OpenAI credentials from more than 10,000 users and sending them to third-party servers. Cybersecurity platform ...
Infosecurity Magazine

Experts Sound Alarm Over “Prompt Poaching” Browser Extensions

Security experts have warned users to beware of malicious Chrome extensions designed to secretly monitor and exfiltrate users ...
Morningstar

Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers

PALO ALTO, Calif., Nov. 19, 2025 /PRNewswire/ -- SquareX released critical research exposing a hidden API in Comet that allows extensions in the AI Browser to execute local commands and gain full ...
InfoWorld

Google offers HTML APIs and browser extensions in Chrome

Google’s release Monday of a “stable channel” update of the Google Chrome browser for Windows features HTML and JavaScript APIs as well as browser extensions, according to company blogs. The company ...