#ExtensionSecurity
LightNews LightNews
thedailytechfeed.com
Manifest V2 is being phased out in Edge—Manifest V3 becomes mandatory in 2027 #ManifestV3 #BrowserSecurity #MicrosoftEdge #TechPolicy #ExtensionSecurity #Cybersecurity https://thedailytechfeed.com/microsoft-phases-out-manifest-v2-in-edge-manifest-v3-to-take-over/
September 7, 2026 at 2:42 PM
potato.software
Manifest V2 is being phased out in Edge—Manifest V3 becomes mandatory in 2027 #ManifestV3 #BrowserSecurity #MicrosoftEdge #TechPolicy #ExtensionSecurity #Potatosecurity https://thedailytechfeed.com/microsoft-phases-out-manifest-v2-in-edge-manifest-v3-to-take-over/
September 7, 2026 at 2:59 PM
thedailytechfeed.com
One click in a malicious VS Code project can install an extension and give attackers long-term access. #VSCode #Security #WorkspaceTrust #DevSecOps #ExtensionSecurity https://thedailytechfeed.com/one-click-in-vs-code-can-install-malicious-extension-granting-persistent-access/
September 18, 2026 at 11:01 AM
checkmarxzero.bsky.social
We took down 6 more malicious #VSCode packages that seem to be an evolved brandjacking attack similar the attack on Prettier we previously took down.

List of extensions and additional info: buff.ly/wxviY9d

#SupplyChainSecurity #DeveloperSecurity #ExtensionSecurity #VisualStudioCode
Taking Down More Malicious VSCode Extensions in the 'Prettier' Campaign - Checkmarx
As adversaries improve their tactics for getting malicious content into the Visual Studio Code Marketplace and Open VSX, Checkmarx Zero continues to defend the community. Here's the latest…
checkmarx.com
December 5, 2025 at 4:04 PM
cybermaterial.bsky.social
GhostPoster Malware Hits Firefox Addons
Read More: buff.ly/XrBjCtk

#Cybersecurity #Malware #BrowserSecurity #Firefox #SupplyChainAttack #AdFraud #Infosec #ExtensionSecurity #ThreatIntel
December 17, 2025 at 6:00 PM
techlife-blog.bsky.social
AI-Powered Code Editors Could Have Become Malware Delivery Machines: Here's What Happened

techlife.blog/posts/vscode...

#VSCode #Cursor #Windsurf #OpenVSX #SupplyChainAttack #ExtensionSecurity #DeveloperTools #Cybersecurity
AI-Powered Code Editors Could Have Become Malware Delivery Machines: Here's What Happened
Security researchers discover that popular AI coding tools like Cursor and Windsurf were vulnerable to a sneaky supply chain attack through fake extension recommendations
techlife.blog
January 6, 2026 at 7:12 PM
checkmarxzero.bsky.social
And of course, as always, we appreciate the support of Microsoft and OpenVSX, both of whom responded promptly and professionally.

#SupplyChainSecurity #MaliciousPackages #DeveloperSecurity #SoftwareSupplyChain #ExtensionSecurity #VisualStudioCode
December 5, 2025 at 4:04 PM
mbissey.bsky.social
Fake ChatGPT browser extensions are stealing login credentials — AI hype is being weaponized to hijack accounts. Install less, verify more. 🧩⚠️ #ExtensionSecurity #CredentialTheft

buff.ly/iIQlF5G
Beware! Fake ChatGPT browser extensions are stealing your login credentials
If you've installed a browser extension to enhance your ChatGPT experience, you might want to think again.
buff.ly
January 29, 2026 at 4:04 PM
mbissey.bsky.social
Two Chrome extensions were caught secretly collecting user data — privacy threats don’t always look malicious. Scrutinize what you install. 🧩🔍 #BrowserPrivacy #ExtensionSecurity
Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites
Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and…
buff.ly
December 24, 2025 at 11:05 AM
mbissey.bsky.social
ShadyPanda is hijacking popular browser extensions to spy on users — turning everyday tools into covert surveillance channels. Trust no add-on without validation. 🧩🕵️‍♂️ #ExtensionSecurity #MalwareCampaign
ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware
ShadyPanda abused browser extensions for seven years, turning 4.3M installs into a multi-phase surveillance and hijacking campaign.
buff.ly
December 5, 2025 at 2:05 PM
mbissey.bsky.social
ShadyPanda extensions racked up 43M installs — turning convenience into mass surveillance. Even “helpful” add-ons can hide hostile code. 🧩⚠️ #ExtensionSecurity #MalwareCampaign
ShadyPanda browser extensions amass 4.3M installs in malicious campaign
A long-running malware operation known as "ShadyPanda" has amassed over 4.3 million installations of seemingly legitimate Chrome and Edge browser extensions that evolved into malware.
buff.ly
December 2, 2025 at 9:05 AM