Malicious Chrome and Edge extensions collected browsing history, keystrokes and personal data from millions of users before ...

A seven-year malicious browser extension campaign infected 4.3 million Google Chrome and Microsoft Edge users with malware, ...

ShadyPanda abused browser extensions for seven years, turning 4.3M installs into a multi-phase surveillance and hijacking ...

The China-based cyber-threat group has been using malicious extensions on the Google Chrome and Microsoft Edge marketplaces ...

A threat actor has published over a hundred malicious extensions that can track and profile Chrome and Microsoft Edge users ...

Malicious extensions occasionally find their way into the Chrome Web Store (and similar libraries in other browsers) by posing as legitimate add-ons. Some of them only morph into malware after gaining ...

Once-trusted Chrome and Edge add-ons have quietly turned into tools for data harvesting, search manipulation, and a ...

Millions of users have been affected by a spyware campaign that has hijacked popular browser extensions. Here’s how it works and how to stay safe.

An emergency patch from Google was rushed out so quickly that the vulnerability doesn't yet have an official CVE number.

The Drop feature lives inside the Edge browser and uses your OneDrive account for storing files you send. So all you have to ...

A threat group dubbed ShadyPanda exploited traditional extension processes in browser marketplaces by uploading legitimate extensions and then quietly weaponization them with malicious updates, ...