Experts uncovered malicious Chrome extensions that replace affiliate links, exfiltrate data, and steal ChatGPT authentication tokens from users.

CISA has added one of a pair of code injection vulnerabilities to the KEV catalogue as experts warn, “this is not a drill”.