#malicious-browser-extensions

[ follow ]
#chrome-security-vulnerability #gemini-live-ai-assistant #data-exfiltration-risk #cve-2026-0628 #passkeys
Information security
fromSecurityWeek
1 month ago

Vulnerability Allowed Hijacking Chrome's Gemini Live AI Assistant

A Chrome vulnerability allowed malicious extensions to hijack Gemini Live AI assistant and access sensitive user data through privileged browser access.
Information security
fromArs Technica
7 months ago

Unpacking Passkeys Pwned: Possibly the most specious research in decades

Malicious browser extensions can create attacker-controlled passkeys bound to legitimate domains, allowing account takeover and undermining the perceived theft immunity of passkeys.
[ Load more ]