Browser Security

Chrome Extensions Steal AI Chats; Android Dolby Codec Gets Critical Patch

Nishant Sharma

07 Jan 2026 — 1 min read

This newsletter is AI generated and may hallucinate sometimes 😊

Malicious Chrome Extensions Steal ChatGPT and DeepSeek AI Chats from 900,000 Users

Two Chrome extensions, "ChatGPT for Google" and "Quick access for ChatGPT," were found actively stealing user data, including session tokens and chat histories, from ChatGPT and DeepSeek AI services.
The extensions employed obfuscated JavaScript code to intercept API responses, effectively compromising over 900,000 users' sensitive information by collecting session cookies.
Users are urged to review installed extensions, remove suspicious ones, and change credentials for affected AI services if these extensions were previously installed.

Source: The Hacker News | Date: January 05, 2026

Google Patches Critical Dolby Decoder Vulnerability on Android Devices

Google released security updates for Android devices addressing a critical Dolby Decoder vulnerability that could enable remote code execution via specially crafted audio files.
This flaw, affecting devices utilizing Dolby codecs, posed a significant risk as it could allow attackers to execute arbitrary code on vulnerable Android systems.
Users are advised to immediately install the January 2026 Android security updates to protect their devices from potential exploitation.

Source: Security Affairs | Date: January 05, 2026

References

Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users - The Hacker News
Critical Dolby Codec Vulnerability Exposes Android Devices to Code Execution Attacks - Cybersecurity News
Google fixes critical Dolby Decoder bug in Android January update - Security Affairs

Critical Copilot Prompt Injection Exposes Browser Data

This newsletter is AI generated and may hallucinate sometimes 😊 New One-Click Microsoft Copilot Vulnerability Grants Attackers Access to Sensitive Data * A "Reprompt" vulnerability in Microsoft Copilot allows attackers to exfiltrate sensitive user data with a single click via prompt injection techniques. * The flaw exploits browser-integrated AI, manipulating the

Browser Security Updates: Skimming, Chrome Extension, SmartScreen

This newsletter is AI generated and may hallucinate sometimes 😊 Long-Running Web Skimming Campaign Targets Online Checkout Pages * A persistent web skimming campaign, active for over two years, has been identified, targeting online e-commerce checkout pages to steal payment card information. * Attackers inject malicious JavaScript code into legitimate websites, which intercepts

Browser Security Brief: Web-Based LLM Attacks & Prompt Injection Campaigns

This newsletter is AI generated and may hallucinate sometimes 😊 Widespread Campaign Exploits LLMs Through Web-Based Prompt Injection * Threat actors are conducting widespread campaigns exploiting Large Language Models (LLMs) through techniques like prompt injection, data exfiltration, and model manipulation. * These attacks frequently leverage web application interfaces, using browsers as the primary

New 'Greatness' Phishing Platform Targets M365 Users in Browser Attacks

This newsletter is AI generated and may hallucinate sometimes 😊 New 'Greatness' Phishing-as-a-Service Platform Emerges Targeting Microsoft 365 Users * The "Greatness" Phishing-as-a-Service (PhaaS) platform is actively being offered to threat actors, providing advanced phishing kits to facilitate credential harvesting. * This platform specifically targets Microsoft 365 users, employing

Malicious Chrome Extensions Steal ChatGPT and DeepSeek AI Chats from 900,000 Users

Google Patches Critical Dolby Decoder Vulnerability on Android Devices

References

Read more

Critical Copilot Prompt Injection Exposes Browser Data

Browser Security Updates: Skimming, Chrome Extension, SmartScreen

Browser Security Brief: Web-Based LLM Attacks & Prompt Injection Campaigns

New 'Greatness' Phishing Platform Targets M365 Users in Browser Attacks