One Browser Extension Can Secretly Command Five AI Assistants
The extension did not need to persuade the model. It impersonated the channel the browser’s privileged assistant was built to trust.
Chrome
This Malware Makes Chrome Trust an Extension You Never Approved
The browser can load the malicious extension as though you approved it. Elastic's KREMLIN investigation shows why a familiar banking document can become an endpoint and session-security problem.
The PDF Extension Could Read WhatsApp. The Browser’s Same-Origin Wall Did Not Apply.
A malicious page could use Adobe's Acrobat Chrome extension to read WhatsApp Web content across the browser's same-origin boundary. Adobe patched the chain quickly.