7 articles found
Five Chrome extensions stole Workday, NetSuite, and SAP session tokens using three attack vectors. Here's how enterprise teams can check and protect HR access.
A sideloaded browser extension is how UNC6692's SNOWBELT runs inside headless Edge, skipping Web Store review entirely. Here's how to detect it in your org.
When malicious AI extensions hit 20K+ enterprise tenants, most teams had no playbook. Here's the incident response plan your org needs before the next campaign.
LayerX Labs showed any browser extension — even ones with no permissions — can silently modify your downloads to deliver malware. Here's how to stay safe.
LayerX, CrowdStrike Falcon, and Microsoft Defender all offer enterprise browser extension auditing now. Here's what each does and which fits your team.
Urban VPN Proxy secretly harvested ChatGPT, Claude, and Gemini chats from 8M users. A separate campaign hit 900K users in 20K+ enterprise tenants.
Security researchers exposed 300+ malicious Chrome extensions with 37.4M downloads stealing data, credentials, and emails. Here's how to protect yourself.