Chrome quietly pushed a 4GB Gemini Nano AI model to users, while a fake Perplexity extension wiretapped searches. Two sides of Chrome's consent problem.

I didn't plan to jump on the Gemini or ChatGPT bandwagon when they launched. I waited several months before I was forced to ...

A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using MV3 APIs and intermediary infrastructure.

Turns out the fix was in the Chrome Web Store ...

Microsoft disrupted StegoAd, a malicious browser extension campaign affecting up to 2.6 million users. StegoAd used hidden payloads, delayed execution and steganography to evade browser security ...

I gave ChatGPT, Gemini, and Claude the same browser extension project. Their strengths quickly became obvious.

Adblock for YouTube has over 11 million installations. However, it can inject script code into any page uncontrollably.

Popular Chrome ad blocker with 10M installs exposes a dormant script path, raising hard questions about extension trust, ...

Under-the-hood changes in Google's browser - aimed at improving privacy, security, and performance - will reduce the control ...

Island found dormant JavaScript injection paths in Adblock for YouTube, a Chrome extension with 10M+ installs, raising ...