Malicious Chrome and Edge extensions collected browsing history, keystrokes and personal data from millions of users before ...

After five years, browser extensions turned malicious, putting countless people at risk.

Benign add-ons can be weaponized with malicious updates after gaining user trust.

According to researchers at cybersecurity firm Koi, a China-based hacking syndicate known as ShadyPanda is actively ...

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...

Learn how the ShadyPanda campaign turned trusted browser extensions into spyware and the steps security teams can take to reduce extension risk.

Once-trusted Chrome and Edge add-ons have quietly turned into tools for data harvesting, search manipulation, and a remote-execution backdoor affecting more than 4.3 million users.

The China-based cyber-threat group has been using malicious extensions on the Google Chrome and Microsoft Edge marketplaces ...

ShadyPanda spent seven years uploading trusted Chrome and Edge extensions, later weaponizing them for tracking, hijacking, and remote code execution. Learn how the campaign unfolded.

From record-breaking DDoS attacks to millions infected by malicious extensions, this week delivered some of the most alarming ...

Security researchers found a popular Chrome extension secretly copying and storing AI chats, raising major privacy concerns.