A “Featured” browser add-on marketed as privacy protection may have been copying AI chats. Koi Security says Urban VPN Proxy began intercepting prompts and replies after a July 9, 2025 update.

According to cybersecurity firm Koi, Urban VPN Proxy and three other popular browser extensions with 8 million+ installs can ...

A cybersecurity company claims that a number of web browser extensions are secretly logging and selling users’ conversations with AI chatbots.

Recent exploits are a reminder that when you install an extension, you grant it a lot of power to see where you go online and ...

Koi's investigation identified eight such extensions available on the Chrome Web Store and Microsoft Edge Add-ons page, collectively surpassing eight million installations. Seven of them carried ...

Security researchers have uncovered a massive data harvesting operation hidden within a malicious VPN, affecting over eight ...

Browser extensions with more than 8 million installs are harvesting complete and extended conversations from users’ AI ...

ESET researchers discovered a China-aligned APT group, LongNosedGoblin, which uses Group Policy to deploy cyberespionage ...

These extensions carry a store seal of approval from Google (and Microsoft). All but one carry 'Featured’ badges to signal to users that "the extensions have been reviewed and meet platform quality ...

A Chrome browser extension with 6 million users, as well as seven other Chrome and Edge extensions, for months have been silently collecting data from every AI chatbot conversion, packaging it, and ...

LongNosedGoblin is a newly discovered China-aligned Advanced Persistent Threat (APT) group targeting governmental entities in ...

Millions of people have been pouring their most sensitive prompts, plans, and confessions into AI chatbots, assuming those ...