The attack was not isolated to Cyberhaven. Cybersecurity experts, including Jaime Blasco from Nudge Security, have identified several other similarly compromised extensions.

Hackers Hijacked 16 Chrome Extensions to Inject Malicious Code

Cyberhaven

cyberhaven

PALO ALTO, USA, March 18th, 2025/CyberNewsWire/--SquareX, a pioneer in Browser Detection and Response (BDR) space, announced the launch of the "Year of Browser Bugs" (YOBB) project today, a year-long initiative to draw attention to the lack of security research and rigor in what remains one of the most understudied attack vectors - the browser. The browser has evolved from a simple web rendering engine to be the new “endpoint” — the primary gateway through which users interact with the Internet, for work, leisure, and transactions. Yet, traditional security solutions continue to focus on endpoints and networks despite the exponential growth of browser-native attacks. The YOBB project was inspired by Month of Bugs (MOB), an iconic cybersecurity initiative where security researchers would publish one major vulnerability found in major software providers every day of the month. MOB projects played a huge role in improving the gravity at which security and responsible disclosure are taken in these companies. Notable projects included the Month of Browser Bugs (July 2006), Month of Kernel Bugs (November 2006), and Month of Apple Bugs (January 2007). SquareX is bringing back this tradition with the YOBB to raise awareness of cyberthreats that the browser is vulnerable to. However, unlike H. D. Moore’s original Month of Browser Bugs which focused on software bugs in the browser itself, SquareX will be disclosing application layer attacks that can be delivered through any website, app, or cloud data storage accessed through the browser. Throughout 2025, SquareX’s research team will disclose at least one critical web attack per month as part of the YOBB project, focusing on vulnerabilities that exploit architectural limitations of the browser and incumbent solutions. The research will reveal never-seen-before attack vectors that remain unknown even to the cybersecurity community. Each disclosure will include attack video demonstrations, technical breakdowns, and mitigation strategies. These disclosures will be wholly SquareX-researched and discovered, rather than an aggregation of existing security research. Under the YOBB initiative, SquareX has already made major releases since 2024 and into the first two months of 2025: 2025 January: SquareX Discloses “Browser Syncjacking”, a New Attack Technique that Provides Full Browser and Device Control, Putting Millions at Risk
February: SquareX Unveils Polymorphic Extensions that Morph Infostealers into Any Browser Extension – Password Managers, Wallets at Risk January: SquareX Discloses “Browser Syncjacking”, a New Attack Technique that Provides Full Browser and Device Control, Putting Millions at Risk SquareX Discloses “Browser Syncjacking”, a New Attack Technique that Provides Full Browser and Device Control, Putting Millions at Risk SquareX Discloses “Browser Syncjacking”, a New Attack Technique that Provides Full Browser and Device Control, Putting Millions at Risk February: SquareX Unveils Polymorphic Extensions that Morph Infostealers into Any Browser Extension – Password Managers, Wallets at Risk SquareX Unveils Polymorphic Extensions that Morph Infostealers into Any Browser Extension – Password Managers, Wallets at Risk SquareX Unveils Polymorphic Extensions that Morph Infostealers into Any Browser Extension – Password Managers, Wallets at Risk 2024 August: SquareX Uncovers Critical Flaw in Secure Web Gateways
December: Cyberhaven’s OAuth Identity Attack — Are your Extensions Affected? August: SquareX Uncovers Critical Flaw in Secure Web Gateways SquareX Uncovers Critical Flaw in Secure Web Gateways SquareX Uncovers Critical Flaw in Secure Web Gateways December: Cyberhaven’s OAuth Identity Attack — Are your Extensions Affected? Cyberhaven’s OAuth Identity Attack — Are your Extensions Affected? Cyberhaven’s OAuth Identity Attack — Are your Extensions Affected? Quoting Vivek Ramachandran, the Founder and CEO of SquareX, “As browsers become the new endpoint, attackers are increasingly targeting employees to break into organizations and exfiltrate data, just like the Cyberhaven incident. Unfortunately, beyond mainstream media attention, there is little done by vendors from a security perspective to prevent similar exploits from happening in the future. The YOBB is our attempt to draw attention to an attack surface that is exponentially growing. We hope that this will serve as a call to action for browser and security vendors to solve these vulnerabilities that give rise to application layer attacks that simply cannot be solved through browser patches.” Quoting Vivek Ramachandran, the Founder and CEO of SquareX, “As browsers become the new endpoint, attackers are increasingly targeting employees to break into organizations and exfiltrate data, just like the Cyberhaven incident. Unfortunately, beyond mainstream media attention, there is little done by vendors from a security perspective to prevent similar exploits from happening in the future. The YOBB is our attempt to draw attention to an attack surface that is exponentially growing. We hope that this will serve as a call to action for browser and security vendors to solve these vulnerabilities that give rise to application layer attacks that simply cannot be solved through browser patches.” Vivek Ramachandran Vivek Ramachandran As the year progresses, security teams can expect monthly disclosures to be documented at https://sqrx.com/research. https://sqrx.com/research https://sqrx.com/research About SquareX SquareX’s industry-first Browser Detection and Response (BDR) helps organizations detect, mitigate and threat-hunt client-side web attacks targeting employees in real time. This includes defending against identity attacks, malicious extensions, spearphishing, browser data loss, and insider threats. SquareX SquareX SquareX takes a research and attack-focused approach to browser security. SquareX’s dedicated research team was the first to discover and disclose multiple pivotal attacks, including Last Mile Reassembly Attacks, Polymorphic Extension,s, and Browser Syncjacking. As part of the Year of Browser Bugs (YOBB) project, SquareX commits to continue disclosing at least one major architectural browser vulnerability every month. To learn more about SquareX’s BDR, users can contact founder@sqrx.com. For press inquiries on this disclosure on the Year of Browser Bugs, users can contact junice@sqrx.com. founder@sqrx.com founder@sqrx.com junice@sqrx.com junice@sqrx.com Contact Head of PR Junice Liew SquareX junice@sqrx.com This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here here here

SquareX Launches "Year Of Browser Bugs" (YOBB) To Expose Critical Security Blind Spots

SquareX lanza "Year Of Browser Bugs" (YOBB) para exponer puntos ciegos críticos de seguridad.

SquareX、重大なセキュリティの盲点を明らかにする「ブラウザバグの年」（YOBB）を開始

SquareX dia namoaka ny "Taonan'ny Bug Browser" (YOBB) mba hampiharihary ny toerana jamba fiarovana.

स्क्वायरएक्सले महत्वपूर्ण सुरक्षा ब्लाइन्ड स्पटहरू उजागर गर्न "ब्राउजर बगहरूको वर्ष" (YOBB) सुरु गर्‍यो

SquareX e Thakgola "Ngwaga Wa Diphošo tša Sephephediši" (YOBB) Go Pepentšha Mafelo a Bofofu a Tšhireletšo a Bohlokwa

SquareX lança "Year Of Browser Bugs" (YOBB) para expor pontos cegos críticos de segurança

SquareX spúšťa "Year Of Browser Bugs" (YOBB), aby odhalil kritické bezpečnostné slepé miesta

SquareX lanserar "Year Of Browser Bugs" (YOBB) för att avslöja kritiska säkerhetsblindar

“SquareX” möhüm howpsuzlyk kör nokatlaryny paş etmek üçin “Brauzer ýalňyşlyklarynyň ýyly” (YOBB) başlaýar

Inilunsad ng SquareX ang "Year Of Browser Bugs" (YOBB) Upang Ilantad ang Mga Kritikal na Blind Spot sa Seguridad

SquareX, Kritik Güvenlik Kör Noktalarını Açığa Çıkarmak İçin "Tarayıcı Hataları Yılı"nı (YOBB) Başlattı

SquareX 推出“浏览器漏洞年”（YOBB）以揭露关键安全盲点

PALO ALTO, Singapore, March 6th, 2025/CyberNewsWire/--With recent attack disclosures like Browser Syncjacking and extension infostealers, browser extensions have become a primary security concern at many organizations. SquareX’s research team discovers a new class of malicious extensions that can impersonate any extension installed on the victim’s browser, including password managers and crypto wallets. These malicious extensions can morph themselves to have the exact same user interface, icons and text as the legitimate extension, making it an extremely convincing case for victims to enter their credentials and other sensitive information. This attack impacts most major browsers, including Chrome and Edge. Polymorphic extensions work by exploiting the fact that most users interact with extensions via the pinned in the browser toolbar. The attack begins with the user installing the malicious extension, which disguises itself, for example, as an unassuming AI tool. To make the attack even more convincing, the extension performs the AI functionality as advertised and remains benign for a predetermined period of time. However, while all this is happening, the malicious extension starts figuring out what other extensions are installed in the victim’s browser. Once identified, the polymorphic extension completely changes its own appearance to look like the target, including the icon shown on the pinned toolbar. It can even disable the target extension temporarily, removing it from the pinned bar. Given that most users use these icons as a visual confirmation to inform which extension they are interacting with, changing the icon itself is likely sufficient to convince the average user that they are clicking on the legitimate extension. Even if the victim navigates to the extension dashboard, there is no obvious way to correlate the tools displayed there to the pinned icons. To avoid suspicion, the malicious extension can even temporarily disable the target extension such that they are the only ones with the target’s icon on the pinned tab. Critically, the polymorphic extension can impersonate any browser extension. For example, it can mimic popular password managers to trick victims into entering their master password. This password can then be used by the attacker to log on to the real password manager and access all credentials stored in the password vault. Similarly, the polymorphic extension can also mimic popular crypto wallets, allowing them to use the stolen credentials to authorize transactions to send cryptocurrency to the attacker. Other potential targets include developer tools and banking extensions that may provide the attacker unauthorized access to apps where sensitive data or financial assets are stored. Furthermore, the attack only requires medium-risk permissions based on Chrome Store’s classification. Ironically, many of these permissions are used by password managers themselves, as well as other popular tools like ad blockers and page stylers, making it especially difficult for Chrome Store and security teams to identify malicious intent just by looking at the extension’s code. The founder of SquareX, Vivek Ramachandran cautions that “Browser extensions present a major risk to enterprises and users today. Unfortunately, most organizations have no way of auditing their current extension footprint and to check whether they are malicious.This further underscores the need for a browser native security solution like Browser Detection and Response, similar to what an EDR is to the operating system.” These polymorphic extensions exploit existing features within Chrome to conduct the attack. As such, there is no software bug involved, and it cannot be patched. SquareX has written to Chrome for responsible disclosure, recommending banning or implementation of user alerts for any extension icon changes or abrupt changes in HTML, as these techniques can easily be leveraged by attackers to impersonate other extensions in a polymorphic attack. For enterprises, static extension analysis and permissions-based policies are no longer sufficient - it is critical to have a browser-native security tool that can dynamically analyze extension behaviour at runtime, including polymorphic tendencies of malicious extensions. For more information about polymorphic extensions, additional findings from this research are available at https://sqrx.com/polymorphic-extensions. About SquareX SquareX helps organizations detect, mitigate, and threat-hunt client-side web attacks happening against their users in real time, including defending against malicious extensions. In addition to the polymorphic attack, SquareX was also the first to discover and disclose multiple extension-based attacks, including Browser Syncjacking, the Chrome Store consent phishing attack leading to Cyberhaven’s breach and numerous other MV3-compliant malicious extensions revealed at DEF CON 32. SquareX's industry-first Browser Detection and Response (BDR) solution, takes an attack-focused approach to browser security, ensuring enterprise users are protected against advanced threats like malicious QR Codes, Browser-in-the-Browser phishing, macro-based malware and other web attacks encompassing malicious files, websites, scripts, and compromised networks. Additionally, with SquareX, enterprises can provide contractors and remote workers with secure access to internal applications, enterprise SaaS, and convert the browsers on BYOD / unmanaged devices into trusted browsing sessions. Contact Head of PR Junice Liew SquareX junice@sqrx.com This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here PALO ALTO, Singapore, March 6th, 2025/CyberNewsWire/--With recent attack disclosures like Browser Syncjacking and extension infostealers, browser extensions have become a primary security concern at many organizations. Browser Syncjacking Browser Syncjacking SquareX ’s research team discovers a new class of malicious extensions that can impersonate any extension installed on the victim’s browser, including password managers and crypto wallets. SquareX SquareX These malicious extensions can morph themselves to have the exact same user interface, icons and text as the legitimate extension, making it an extremely convincing case for victims to enter their credentials and other sensitive information. This attack impacts most major browsers, including Chrome and Edge. Polymorphic extensions work by exploiting the fact that most users interact with extensions via the pinned in the browser toolbar. The attack begins with the user installing the malicious extension, which disguises itself, for example, as an unassuming AI tool. To make the attack even more convincing, the extension performs the AI functionality as advertised and remains benign for a predetermined period of time. However, while all this is happening, the malicious extension starts figuring out what other extensions are installed in the victim’s browser. Once identified, the polymorphic extension completely changes its own appearance to look like the target, including the icon shown on the pinned toolbar. It can even disable the target extension temporarily, removing it from the pinned bar. Given that most users use these icons as a visual confirmation to inform which extension they are interacting with, changing the icon itself is likely sufficient to convince the average user that they are clicking on the legitimate extension. Even if the victim navigates to the extension dashboard, there is no obvious way to correlate the tools displayed there to the pinned icons. To avoid suspicion, the malicious extension can even temporarily disable the target extension such that they are the only ones with the target’s icon on the pinned tab. Critically, the polymorphic extension can impersonate any browser extension. For example, it can mimic popular password managers to trick victims into entering their master password. This password can then be used by the attacker to log on to the real password manager and access all credentials stored in the password vault. Similarly, the polymorphic extension can also mimic popular crypto wallets, allowing them to use the stolen credentials to authorize transactions to send cryptocurrency to the attacker. Other potential targets include developer tools and banking extensions that may provide the attacker unauthorized access to apps where sensitive data or financial assets are stored. Furthermore, the attack only requires medium-risk permissions based on Chrome Store’s classification. Ironically, many of these permissions are used by password managers themselves, as well as other popular tools like ad blockers and page stylers, making it especially difficult for Chrome Store and security teams to identify malicious intent just by looking at the extension’s code. The founder of SquareX, Vivek Ramachandran cautions that “Browser extensions present a major risk to enterprises and users today. Unfortunately, most organizations have no way of auditing their current extension footprint and to check whether they are malicious.This further underscores the need for a browser native security solution like Browser Detection and Response, similar to what an EDR is to the operating system.” The founder of SquareX, Vivek Ramachandran cautions that “Browser extensions present a major risk to enterprises and users today. Unfortunately, most organizations have no way of auditing their current extension footprint and to check whether they are malicious.This further underscores the need for a browser native security solution like Browser Detection and Response, similar to what an EDR is to the operating system.” Vivek Ramachandran Vivek Ramachandran These polymorphic extensions exploit existing features within Chrome to conduct the attack. As such, there is no software bug involved, and it cannot be patched. SquareX has written to Chrome for responsible disclosure, recommending banning or implementation of user alerts for any extension icon changes or abrupt changes in HTML, as these techniques can easily be leveraged by attackers to impersonate other extensions in a polymorphic attack. For enterprises, static extension analysis and permissions-based policies are no longer sufficient - it is critical to have a browser-native security tool that can dynamically analyze extension behaviour at runtime, including polymorphic tendencies of malicious extensions. For more information about polymorphic extensions, additional findings from this research are available at https://sqrx.com/polymorphic-extensions . https://sqrx.com/polymorphic-extensions https://sqrx.com/polymorphic-extensions About SquareX SquareX helps organizations detect, mitigate, and threat-hunt client-side web attacks happening against their users in real time, including defending against malicious extensions. In addition to the polymorphic attack, SquareX was also the first to discover and disclose multiple extension-based attacks, including Browser Syncjacking, the Chrome Store consent phishing attack leading to Cyberhaven’s breach and numerous other MV3-compliant malicious extensions revealed at DEF CON 32. SquareX SquareX SquareX's industry-first Browser Detection and Response (BDR) solution, takes an attack-focused approach to browser security, ensuring enterprise users are protected against advanced threats like malicious QR Codes, Browser-in-the-Browser phishing, macro-based malware and other web attacks encompassing malicious files, websites, scripts, and compromised networks. Additionally, with SquareX, enterprises can provide contractors and remote workers with secure access to internal applications, enterprise SaaS, and convert the browsers on BYOD / unmanaged devices into trusted browsing sessions. Contact Head of PR Junice Liew SquareX junice@sqrx.com This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here here here

SquareX Unveils Polymorphic Extensions That Morph Infostealers Into Any Browser Extension 

PALO ALTO, USA, January 30th, 2025/CyberNewsWire/--SquareX discloses a new attack technique that shows how malicious extensions can be used to completely hijack the browser, and eventually, the whole device. Browser extensions have been under the spotlight in enterprise security news recently due to the wave of OAuth attacks on Chrome extension developers and data exfiltration attacks. However, until now, due to the limitations browser vendors place on the extension subsystem and extensions, it was thought to be impossible for extensions to gain full control of the browser, much less the device. SquareX researchers Dakshitaa Babu, Arpit Gupta, Sunkugari Tejeswara Reddy and Pankaj Sharma debunked this belief by demonstrating how attackers can use malicious extensions to escalate privileges to conduct a full browser and device takeover, all with minimal user interaction. Critically, the malicious extension only requires read/write capabilities present in the majority of browser extensions on the Chrome Store, including common productivity tools like Grammarly, Calendly and Loom, desensitizing users from granting these permissions. This revelation suggests that virtually any browser extension could potentially serve as an attack vector if created or taken over by an attacker. To the best of our understanding, extensions submitted to the Chrome Store requesting these capabilities are not put through additional security scrutiny at the time of this writing. The browser syncjacking attack can be broken up into three parts: how the extension silently adds a profile managed by the attacker, hijacks the browser and eventually gains full control of the device. Profile Hijacking The attack begins with an employee installing any browser extension - this could involve publishing one that masquerades as an AI tool or taking over existing popular extensions that may have up to millions of installations in aggregate. The extension then “silently” authenticates the victim into a Chrome profile managed by the attacker’s Google Workspace. This is all done in an automated manner in a background window, making the whole process almost imperceptible to the victim. Once this authentication occurs, the attacker has full control over the newly managed profile in the victim’s browser, allowing them to push automated policies such as disabling safe browsing and other security features. Using a very clever social engineering attack that exploits trusted domains, the adversary can then further escalate the profile hijacking attack to steal passwords from the victim’s browser. For example, the malicious extension can open and modify Google’s official support page on how to sync user accounts to prompt the victim to perform the sync with just a few clicks. Once the profile is synced, attackers have full access to all credentials and browsing history stored locally. As this attack only leverages legitimate sites and has no visible sign that it has been modified by the extension, it will not trigger any alarm bells in any security solutions monitoring the network traffic. Browser Takeover To achieve a full browser takeover, the attacker essentially needs to convert the victim’s Chrome browser into a managed browser. The same extension monitors and intercepts a legitimate download, such as a Zoom update, and replaces it with the attacker’s executable, which contains an enrollment token and registry entry to turn the victim’s Chrome browser into a managed browser. Thinking that they downloaded a Zoom updater, the victim executes the file, which ends up installing a registry entry that instructs the browser to become managed by the attacker’s Google Workspace. This allows the attacker to gain full control over the victim’s browser to disable security features, install additional malicious extensions, exfiltrate data and even silently redirect users to phishing sites. This attack is extremely potent as there is no visual difference between a managed and unmanaged browser. For a regular user, there is no telltale sign that a privilege escalation has occurred unless the victim is highly security aware and goes out of their way to regularly inspect their browser settings and look for associations with an unfamiliar Google Workspace account. Device Hijacking With the same downloaded file above, the attacker can additionally insert registry entries required for the malicious extension to message native apps. This allows the extension to directly interact with local apps without further authentication. Once the connection is established, attackers can use the extension in conjunction with the local shell and other available native applications to secretly turn on the device camera, capture audio, record screens and install malicious software - essentially providing full access to all applications and confidential data on the device. The browser syncjacking attack exposes a fundamental flaw in the way remote-managed profiles and browsers are managed. Today, anyone can create a managed workspace account tied to a new domain and a browser extension without any form of identity verification, making it impossible to attribute these attacks. Unfortunately, most enterprises currently have zero visibility into the browser - most do not have managed browsers or profiles, nor any visibility to the extensions employees are installing often based on trending tools and social media recommendations. What makes this attack particularly dangerous is that it operates with minimal permissions and nearly no user interaction, requiring only a subtle social engineering step using trusted websites - making it almost impossible for employees to detect. While recent incidents like the Cyberhaven breach have already compromised hundreds, if not thousands of organizations, those attacks required relatively complex social engineering to operate. The devastatingly subtle nature of this attack - with an extremely low threshold of user interaction - not only makes this attack extremely potent, but also sheds light on the terrifying possibility that adversaries are already using this technique to compromise enterprises today. Unless an organization chooses to completely block browser extensions via managed browsers, the browser syncjacking attack will completely bypass existing blacklists and permissions-based policies. SquareX’s founder Vivek Ramachandran says “This research exposes a critical blind spot in enterprise security. Traditional security tools simply can't see or stop these sophisticated browser-based attacks. What makes this discovery particularly alarming is how it weaponizes seemingly innocent browser extensions into complete device takeover tools, all while flying under the radar of conventional security measures like EDRs and SASE/SSE Secure Web Gateways. A Browser Detection-Response solution isn't just an option anymore - it's a necessity. Without visibility and control at the browser level, organizations are essentially leaving their front door wide open to attackers. This attack technique demonstrates why security needs to 'shift up' to where the threats are actually happening: in the browser itself.” SquareX has been conducting pioneering security research on browser extensions, including the DEF CON 32 talk Sneaky Extensions: The MV3 Escape Artists that revealed multiple MV3 compliant malicious extensions. This research team was also the first to discover and disclose the OAuth attack on Chrome extension developers one week before the Cyberhaven breach. SquareX was also responsible for the discovery of Last Mile Reassembly attacks, a new class of client-side attacks that exploits architectural flaws and completely bypasses all Secure Web Gateway solutions. Based on this research, SquareX’s industry-first Browser Detection and Response solution protects enterprises against advanced extension-based attacks including device hijacking attempts by conducting dynamic analysis on all browser extension activity at runtime, providing a risk score to all active extensions across the enterprise and further identifying any attacks that they may be vulnerable to. For more information about the browser syncjacking attack, additional findings from this research are available at sqrx.com/research. About SquareX SquareX helps organizations detect, mitigate and threat-hunt client-side web attacks happening against their users in real time. SquareX's industry-first Browser Detection and Response (BDR) solution, takes an attack-focused approach to browser security, ensuring enterprise users are protected against advanced threats like malicious QR Codes, Browser-in-the-Browser phishing, macro-based malware and other web attacks encompassing malicious files, websites, scripts, and compromised networks. Additionally, with SquareX, enterprises can provide contractors and remote workers with secure access to internal applications, enterprise SaaS, and convert the browsers on BYOD / unmanaged devices into trusted browsing sessions. Contact Head of PR Junice Liew SquareX junice@sqrx.com This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here PALO ALTO, USA, January 30th, 2025/CyberNewsWire/--SquareX discloses a new attack technique that shows how malicious extensions can be used to completely hijack the browser, and eventually, the whole device. Browser extensions have been under the spotlight in enterprise security news recently due to the wave of OAuth attacks on Chrome extension developers and data exfiltration attacks. However, until now, due to the limitations browser vendors place on the extension subsystem and extensions, it was thought to be impossible for extensions to gain full control of the browser, much less the device. SquareX researchers Dakshitaa Babu, Arpit Gupta, Sunkugari Tejeswara Reddy and Pankaj Sharma debunked this belief by demonstrating how attackers can use malicious extensions to escalate privileges to conduct a full browser and device takeover, all with minimal user interaction. SquareX SquareX Critically, the malicious extension only requires read/write capabilities present in the majority of browser extensions on the Chrome Store, including common productivity tools like Grammarly, Calendly and Loom, desensitizing users from granting these permissions. This revelation suggests that virtually any browser extension could potentially serve as an attack vector if created or taken over by an attacker. To the best of our understanding, extensions submitted to the Chrome Store requesting these capabilities are not put through additional security scrutiny at the time of this writing. The browser syncjacking attack can be broken up into three parts: how the extension silently adds a profile managed by the attacker, hijacks the browser and eventually gains full control of the device. Profile Hijacking The attack begins with an employee installing any browser extension - this could involve publishing one that masquerades as an AI tool or taking over existing popular extensions that may have up to millions of installations in aggregate. The extension then “silently” authenticates the victim into a Chrome profile managed by the attacker’s Google Workspace. This is all done in an automated manner in a background window, making the whole process almost imperceptible to the victim. Once this authentication occurs, the attacker has full control over the newly managed profile in the victim’s browser, allowing them to push automated policies such as disabling safe browsing and other security features. Using a very clever social engineering attack that exploits trusted domains, the adversary can then further escalate the profile hijacking attack to steal passwords from the victim’s browser. For example, the malicious extension can open and modify Google’s official support page on how to sync user accounts to prompt the victim to perform the sync with just a few clicks. Once the profile is synced, attackers have full access to all credentials and browsing history stored locally. As this attack only leverages legitimate sites and has no visible sign that it has been modified by the extension, it will not trigger any alarm bells in any security solutions monitoring the network traffic. Browser Takeover To achieve a full browser takeover, the attacker essentially needs to convert the victim’s Chrome browser into a managed browser. The same extension monitors and intercepts a legitimate download, such as a Zoom update, and replaces it with the attacker’s executable, which contains an enrollment token and registry entry to turn the victim’s Chrome browser into a managed browser. Thinking that they downloaded a Zoom updater, the victim executes the file, which ends up installing a registry entry that instructs the browser to become managed by the attacker’s Google Workspace. This allows the attacker to gain full control over the victim’s browser to disable security features, install additional malicious extensions, exfiltrate data and even silently redirect users to phishing sites. This attack is extremely potent as there is no visual difference between a managed and unmanaged browser. For a regular user, there is no telltale sign that a privilege escalation has occurred unless the victim is highly security aware and goes out of their way to regularly inspect their browser settings and look for associations with an unfamiliar Google Workspace account. Device Hijacking With the same downloaded file above, the attacker can additionally insert registry entries required for the malicious extension to message native apps. This allows the extension to directly interact with local apps without further authentication. Once the connection is established, attackers can use the extension in conjunction with the local shell and other available native applications to secretly turn on the device camera, capture audio, record screens and install malicious software - essentially providing full access to all applications and confidential data on the device. The browser syncjacking attack exposes a fundamental flaw in the way remote-managed profiles and browsers are managed. Today, anyone can create a managed workspace account tied to a new domain and a browser extension without any form of identity verification, making it impossible to attribute these attacks. Unfortunately, most enterprises currently have zero visibility into the browser - most do not have managed browsers or profiles, nor any visibility to the extensions employees are installing often based on trending tools and social media recommendations. What makes this attack particularly dangerous is that it operates with minimal permissions and nearly no user interaction, requiring only a subtle social engineering step using trusted websites - making it almost impossible for employees to detect. While recent incidents like the Cyberhaven breach have already compromised hundreds, if not thousands of organizations, those attacks required relatively complex social engineering to operate. The devastatingly subtle nature of this attack - with an extremely low threshold of user interaction - not only makes this attack extremely potent, but also sheds light on the terrifying possibility that adversaries are already using this technique to compromise enterprises today. Unless an organization chooses to completely block browser extensions via managed browsers, the browser syncjacking attack will completely bypass existing blacklists and permissions-based policies. SquareX’s founder Vivek Ramachandran says “This research exposes a critical blind spot in enterprise security. Traditional security tools simply can't see or stop these sophisticated browser-based attacks. What makes this discovery particularly alarming is how it weaponizes seemingly innocent browser extensions into complete device takeover tools, all while flying under the radar of conventional security measures like EDRs and SASE/SSE Secure Web Gateways. A Browser Detection-Response solution isn't just an option anymore - it's a necessity. Without visibility and control at the browser level, organizations are essentially leaving their front door wide open to attackers. This attack technique demonstrates why security needs to 'shift up' to where the threats are actually happening: in the browser itself.” SquareX’s founder Vivek Ramachandran says “This research exposes a critical blind spot in enterprise security. Traditional security tools simply can't see or stop these sophisticated browser-based attacks. What makes this discovery particularly alarming is how it weaponizes seemingly innocent browser extensions into complete device takeover tools, all while flying under the radar of conventional security measures like EDRs and SASE/SSE Secure Web Gateways. A Browser Detection-Response solution isn't just an option anymore - it's a necessity. Without visibility and control at the browser level, organizations are essentially leaving their front door wide open to attackers. This attack technique demonstrates why security needs to 'shift up' to where the threats are actually happening: in the browser itself.” Vivek Ramachandran Vivek Ramachandran SquareX has been conducting pioneering security research on browser extensions, including the DEF CON 32 talk Sneaky Extensions: The MV3 Escape Artists that revealed multiple MV3 compliant malicious extensions. Sneaky Extensions: The MV3 Escape Artists Sneaky Extensions: The MV3 Escape Artists This research team was also the first to discover and disclose the OAuth attack on Chrome extension developers one week before the Cyberhaven breach . SquareX was also responsible for the discovery of Last Mile Reassembly attacks, a new class of client-side attacks that exploits architectural flaws and completely bypasses all Secure Web Gateway solutions. OAuth attack on Chrome extension developers OAuth attack on Chrome extension developers Cyberhaven breach Cyberhaven breach Last Mile Reassembly Last Mile Reassembly Based on this research, SquareX’s industry-first Browser Detection and Response solution protects enterprises against advanced extension-based attacks including device hijacking attempts by conducting dynamic analysis on all browser extension activity at runtime, providing a risk score to all active extensions across the enterprise and further identifying any attacks that they may be vulnerable to. For more information about the browser syncjacking attack, additional findings from this research are available at sqrx.com/research . sqrx.com/research sqrx.com/research About SquareX SquareX helps organizations detect, mitigate and threat-hunt client-side web attacks happening against their users in real time. SquareX SquareX SquareX's industry-first Browser Detection and Response (BDR) solution, takes an attack-focused approach to browser security, ensuring enterprise users are protected against advanced threats like malicious QR Codes, Browser-in-the-Browser phishing, macro-based malware and other web attacks encompassing malicious files, websites, scripts, and compromised networks. Additionally, with SquareX, enterprises can provide contractors and remote workers with secure access to internal applications, enterprise SaaS, and convert the browsers on BYOD / unmanaged devices into trusted browsing sessions. Contact Head of PR Junice Liew SquareX junice@sqrx.com This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here here here

SquareX Discloses “Browser Syncjacking” , a New Attack Technique That Puts Millions At Risk

SquareX onthul "Browser Syncjacking", 'n nuwe aanvalstegniek wat miljoene in gevaar stel

SquareX раскрывае «сінджэк браўзера», новую тэхніку атакі, якая ставіць пад пагрозу мільёны

SquareX revela “Browser Syncjacking”, una nueva técnica de ataque que pone en riesgo a millones de personas

SquareX révèle le « Browser Syncjacking », une nouvelle technique d’attaque qui met des millions de personnes en danger

SquareX חושפת את "סינכרון דפדפן", טכניקת התקפה חדשה שמעמידה מיליונים בסיכון

SquareX、数百万人を危険にさらす新たな攻撃手法「ブラウザシンクジャッキング」を公開

SquareX миллиондаған адамдарға қауіп төндіретін «браузерлерді синхрондау» жаңа шабуыл әдісін ашады.

SquareX លាតត្រដាង "Browser Syncjacking" ដែលជាបច្ចេកទេសវាយប្រហារថ្មីដែលដាក់ហានិភ័យរាប់លាន

SquareX onthult ‘Browser Syncjacking’, een nieuwe aanvalstechniek die miljoenen mensen in gevaar brengt

SquareX odhaľuje „synchronizáciu prehliadača“, novú techniku útoku, ktorá ohrozuje milióny ľudí

SquareX, Milyonlarca Kişiyi Tehlikeye Sokan Yeni Bir Saldırı Tekniği Olan "Tarayıcı Senkronizasyon Saldırısı"nı Açıkladı

I-SquareX Idalula “Ukuvumelanisa Kwesiphequluli”, Indlela Entsha Yokuhlasela Ebeka Izigidi Engcupheni

PALO ALTO, Calif., USA, December 30th, 2024/CyberNewsWire/--SquareX, an industry-first Browser Detection and Response (BDR) solution, leads the way in browser security. About a week ago, SquareX reported large-scale attacks targeting Chrome Extension developers aimed at taking over the Chrome Extension from the Chrome Store. On December 25th, 2024, a malicious version of Cyberhaven’s browser extension was published on the Chrome Store that allowed the attacker to hijack authenticated sessions and exfiltrate confidential information. The malicious extension was available for download for more than 30 hours before being removed by Cyberhaven. The data loss prevention company declined to comment on the extent of the impact when approached by the press, but the extension had over 400,000 users on the Chrome Store at the time of the attack. Unfortunately, the attack took place as SquareX's researchers had identified a similar attack with a video demonstrating the entire attack pathway just a week before the Cyberhaven breach. The attack begins with a phishing email impersonating Chrome Store containing a supposed violation of the platform’s “Developer Agreement”, urging the receiver to accept the policies to prevent their extension from being removed from Chrome Store. Upon clicking on the policy button, the user gets prompted to connect their Google account to a “Privacy Policy Extension”, which grants the attacker access to edit, update and publish extensions on the developer’s account. Fig 1. Phishing email targeting extension developers Fig 2. Fake Privacy Policy Extension requesting access to “edit, update or publish” the developer’s extension Extensions have become an increasingly popular way for attackers to gain initial access. This is because most organizations have limited purview on what browser extensions their employees are using. Even the most rigorous security teams typically do not monitor subsequent updates once an extension is whitelisted. SquareX has conducted extensive research and demonstrated at DEFCON 32, how MV3-compliant extensions can be used to steal video stream feeds, add a silent GitHub collaborator, and steal session cookies, among others. Attackers can create a seemingly harmless extension and later convert it into a malicious one post-installation or, as demonstrated in the attack above, deceive the developers behind a trusted extension to gain access to one that already has hundreds of thousands of users. In Cyberhaven’s case, attackers were able to steal company credentials across multiple websites and web apps through the malicious version of the extension. Given that developer emails are publicly listed on Chrome Store, it is easy for attackers to target thousands of extension developers at once. These emails are typically used for bug reporting. Thus, even support emails listed for extensions from larger companies are usually routed to developers who may not have the level of security awareness required to find suspicion in such an attack. As per SquareX’s attack disclosure and the Cyberhaven breach that occurred within the span of less than two weeks, the company has strong reason to believe that many other browser extension providers are being attacked in the same way. SquareX urges companies and individuals alike to conduct a careful inspection before installing or updating any browser extensions. Fig 3. Contact details of extension developers are publicly available on Chrome Store SquareX team understands that it can be non-trivial to evaluate and monitor every single browser extension in the workforce amidst all the competing security priorities, especially when it comes to zero-day attacks. As demonstrated in the video, the fake privacy policy app involved in Cyberhaven’s breach was not even detected by any popular threat feeds. SquareX’s Browser Detection and Response (BDR) solution takes this complexity off security teams by: Blocking OAuth interactions to unauthorized websites to prevent employees from accidentally giving attackers unauthorized access to your Chrome Store account
Blocking and/or flagging any suspicious extension updates containing new, risky permissions
Blocking and/or flagging any suspicious extensions with a surge of negative reviews
Blocking and/or flagging installations of sideloaded extensions
Streamline all requests for extension installations outside the authorized list for quick approval based on company policy
Full visibility on all extensions installed and used by employees across the organization SquareX’s founder Vivek Ramachandran warns: “Identity attacks targeting browser extensions similar to this OAuth attack will only become more prevalent as employees rely on more browser-based tools to be productive at work. Similar variants of these attacks have been used in the past to steal cloud data from apps like Google Drive and One Drive and we will only see attackers get more creative in exploiting browser extensions. Companies need to remain vigilant and minimize their supply chain risk without hampering employee productivity by equipping them with the right browser native tools.” About SquareX: SquareX helps organizations detect, mitigate, and threat-hunt client-side web attacks happening against their users in real-time. SquareX's industry-first Browser Detection and Response (BDR) solution, takes an attack-focused approach to browser security, ensuring enterprise users are protected against advanced threats like malicious QR Codes, Browser-in-the-Browser phishing, macro-based malware, and other web attacks encompassing malicious files, websites, scripts, and compromised networks. With SquareX, enterprises can provide contractors and remote workers with secure access to internal applications, and enterprise SaaS, and convert the browsers on BYOD / unmanaged devices into trusted browsing sessions. Contact Head of PR Junice Liew SquareX junice@sqrx.com This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here PALO ALTO, Calif., USA, December 30th, 2024/CyberNewsWire/--SquareX, an industry-first Browser Detection and Response (BDR) solution, leads the way in browser security. About a week ago, SquareX reported large-scale attacks targeting Chrome Extension developers aimed at taking over the Chrome Extension from the Chrome Store. reported reported On December 25th, 2024, a malicious version of Cyberhaven’s browser extension was published on the Chrome Store that allowed the attacker to hijack authenticated sessions and exfiltrate confidential information. The malicious extension was available for download for more than 30 hours before being removed by Cyberhaven. The data loss prevention company declined to comment on the extent of the impact when approached by the press, but the extension had over 400,000 users on the Chrome Store at the time of the attack. malicious extension malicious extension Chrome Store Chrome Store Unfortunately, the attack took place as SquareX's researchers had identified a similar attack with a video demonstrating the entire attack pathway just a week before the Cyberhaven breach. identified identified video video The attack begins with a phishing email impersonating Chrome Store containing a supposed violation of the platform’s “Developer Agreement”, urging the receiver to accept the policies to prevent their extension from being removed from Chrome Store. Upon clicking on the policy button, the user gets prompted to connect their Google account to a “Privacy Policy Extension”, which grants the attacker access to edit, update and publish extensions on the developer’s account. Fig 1. Phishing email targeting extension developers Fig 2. Fake Privacy Policy Extension requesting access to “edit, update or publish” the developer’s extension Extensions have become an increasingly popular way for attackers to gain initial access. This is because most organizations have limited purview on what browser extensions their employees are using. Even the most rigorous security teams typically do not monitor subsequent updates once an extension is whitelisted. SquareX has conducted extensive research and demonstrated at DEFCON 32, how MV3-compliant extensions can be used to steal video stream feeds, add a silent GitHub collaborator, and steal session cookies, among others. DEFCON 32, DEFCON 32, Attackers can create a seemingly harmless extension and later convert it into a malicious one post-installation or, as demonstrated in the attack above, deceive the developers behind a trusted extension to gain access to one that already has hundreds of thousands of users. In Cyberhaven’s case, attackers were able to steal company credentials across multiple websites and web apps through the malicious version of the extension. Given that developer emails are publicly listed on Chrome Store, it is easy for attackers to target thousands of extension developers at once. These emails are typically used for bug reporting. Thus, even support emails listed for extensions from larger companies are usually routed to developers who may not have the level of security awareness required to find suspicion in such an attack. As per SquareX’s attack disclosure and the Cyberhaven breach that occurred within the span of less than two weeks, the company has strong reason to believe that many other browser extension providers are being attacked in the same way. SquareX urges companies and individuals alike to conduct a careful inspection before installing or updating any browser extensions. Fig 3. Contact details of extension developers are publicly available on Chrome Store SquareX team understands that it can be non-trivial to evaluate and monitor every single browser extension in the workforce amidst all the competing security priorities, especially when it comes to zero-day attacks. As demonstrated in the video , the fake privacy policy app involved in Cyberhaven’s breach was not even detected by any popular threat feeds. video video SquareX’s Browser Detection and Response (BDR) solution takes this complexity off security teams by: SquareX’s Browser Detection and Response (BDR) solution SquareX’s Browser Detection and Response (BDR) solution Blocking OAuth interactions to unauthorized websites to prevent employees from accidentally giving attackers unauthorized access to your Chrome Store account Blocking and/or flagging any suspicious extension updates containing new, risky permissions Blocking and/or flagging any suspicious extensions with a surge of negative reviews Blocking and/or flagging installations of sideloaded extensions Streamline all requests for extension installations outside the authorized list for quick approval based on company policy Full visibility on all extensions installed and used by employees across the organization Blocking OAuth interactions to unauthorized websites to prevent employees from accidentally giving attackers unauthorized access to your Chrome Store account Blocking and/or flagging any suspicious extension updates containing new, risky permissions Blocking and/or flagging any suspicious extensions with a surge of negative reviews Blocking and/or flagging installations of sideloaded extensions Streamline all requests for extension installations outside the authorized list for quick approval based on company policy Full visibility on all extensions installed and used by employees across the organization SquareX’s founder Vivek Ramachandran warns: “Identity attacks targeting browser extensions similar to this OAuth attack will only become more prevalent as employees rely on more browser-based tools to be productive at work. Similar variants of these attacks have been used in the past to steal cloud data from apps like Google Drive and One Drive and we will only see attackers get more creative in exploiting browser extensions. Companies need to remain vigilant and minimize their supply chain risk without hampering employee productivity by equipping them with the right browser native tools.” SquareX’s founder Vivek Ramachandran warns: “Identity attacks targeting browser extensions similar to this OAuth attack will only become more prevalent as employees rely on more browser-based tools to be productive at work. Similar variants of these attacks have been used in the past to steal cloud data from apps like Google Drive and One Drive and we will only see attackers get more creative in exploiting browser extensions. Companies need to remain vigilant and minimize their supply chain risk without hampering employee productivity by equipping them with the right browser native tools.” Vivek Ramachandran Vivek Ramachandran About SquareX: SquareX helps organizations detect, mitigate, and threat-hunt client-side web attacks happening against their users in real-time. SquareX SquareX SquareX's industry-first Browser Detection and Response (BDR) solution, takes an attack-focused approach to browser security, ensuring enterprise users are protected against advanced threats like malicious QR Codes, Browser-in-the-Browser phishing, macro-based malware, and other web attacks encompassing malicious files, websites, scripts, and compromised networks. With SquareX, enterprises can provide contractors and remote workers with secure access to internal applications, and enterprise SaaS, and convert the browsers on BYOD / unmanaged devices into trusted browsing sessions. Contact Head of PR Junice Liew SquareX junice@sqrx.com This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here This story was distributed as a release by Cybernewswire under HackerNoon’s Business Blogging Program. Learn more about the program here here here

SquareX Researchers Expose OAuth Attack On Chrome Extensions Days Before Major Breach

Даследчыкі SquareX выкрылі атаку OAuth на пашырэнні Chrome за некалькі дзён да сур'ёзнага ўзлому

Investigadores de SquareX descubren un ataque OAuth en extensiones de Chrome días antes de una importante vulneración

Istraživači SquareX-a razotkrivaju OAuth napad na Chromeova proširenja danima prije većeg proboja

חוקרי SquareX חושפים את התקפת OAuth על הרחבות Chrome ימים לפני הפרה גדולה

SquareX の研究者が、大規模な侵害の数日前に Chrome 拡張機能への OAuth 攻撃を暴露

SquareX зерттеушілері Chrome кеңейтімдеріндегі OAuth шабуылын үлкен бұзылулардан бірнеше күн бұрын ашты

SquareX 연구원, 주요 침해 발생 며칠 전 크롬 확장 프로그램에 대한 OAuth 공격 폭로

SquareX изилдөөчүлөрү Chrome кеңейтүүлөрүнө OAuth чабуулун ири бузуулардан бир нече күн мурун ашкерелешти

ນັກຄົ້ນຄວ້າ SquareX ເປີດເຜີຍການໂຈມຕີ OAuth ກ່ຽວກັບ Chrome Extensions ມື້ກ່ອນການລະເມີດທີ່ສໍາຄັນ

Badacze SquareX ujawniają atak OAuth na rozszerzenia Chrome na kilka dni przed poważnym naruszeniem

SquareX-forskare avslöjar OAuth-attack på Chrome-tillägg dagar innan större intrång

Abaphandi be-SquareX Baveza uhlaselo lwe-OAuth kwiiNtsuku zoLwandiso lwe-Chrome ngaphambi kokwaphulwa okukhulu

Is the ChatGPT honeymoon period over? ChatGPT has taken the world by storm since its release last year. However, a recent survey found that have implemented or are considering bans on and other applications in their workplace. 75% of businesses ChatGPT Generative AI Why are companies getting cold feet about ChatGPT? It’s not that they doubt its capabilities. Instead, they’re worried about potential cybersecurity risks. A Growing Concern: Data Leaks and ChatGPT Generative AI tools are designed to learn from every interaction. The more data you feed them, the smarter they become. Sounds great, right? But there’s a gray area concerning where the data goes, who sees it, and how it’s used. These privacy concerns led to the Italian data-protection authority in April. temporarily banning ChatGPT https://twitter.com/GergelyOrosz/status/1643903467734409216?embedable=true For businesses, the worry is that ChatGPT might take user-submitted information, learn from it, and potentially let it slip in future interactions with other users. OpenAI’s guidelines for ChatGPT indicate that user data could be reviewed and used to refine the system. But what does this mean for data privacy? The answer isn’t clear-cut, and that’s what’s causing the anxiety. Data Leak Worries: What’s the Real Risk? A found that by June 1, 10.8% of workers utilized ChatGPT at work, with 8.6% inputting company information. The alarming statistic is that 4.7% of workers have entered confidential information into ChatGPT. Cyberhaven study And because of the way ChatGPT works, traditional security measures are lacking. Most security products are designed to protect files from being shared or uploaded. But ChatGPT users copy and paste content into their browsers. Now, OpenAI has added an opt-out option. Users can request their data not to be used for further training. But the opt-out is not the default setting. So, unless users are aware and take proactive measures, their interactions might be used to train the AI. The concerns don’t stop there. Even if you opt out, your data still passes through the system. And while OpenAI assures users that data is managed responsibly, ChatGPT . It isn’t clear how data flows within the system once it’s ingested. acts as a black box There’s also the risk that something goes wrong. On March 21, 2023, OpenAI because of a glitch that incorrectly titled chat histories with names from different users. If these titles held private or sensitive details, other ChatGPT users might have seen them. The bug also exposed the personal data of some ChatGPT Plus subscribers. shut down ChatGPT The Samsung Incident The first major ChatGPT data leak occurred earlier this year and involved the tech giant . According to Bloomberg, sensitive internal source code was after an engineer uploaded it to ChatGPT. Samsung accidentally leaked https://twitter.com/SergioRocks/status/1653814248848470023?embedable=true A leak like this can have severe implications. And it wasn’t just Samsung. , another titan in the tech industry, had its own concerns. The company where ChatGPT’s responses eerily resembled Amazon’s internal data. Amazon identified instances If ChatGPT has Amazon’s proprietary data, what’s stopping it from inadvertently spilling it to competitors? Lack of Clear Regulations The rapid evolution and adoption of Generative AI tools have left regulatory bodies playing catch-up. There are limited guidelines around responsible use. So, if there’s a data breach because of the AI, who’s responsible – the company using the tool, the employees, or the AI provider? In OpenAI’s , the responsibility lies with the user: Terms of Use That puts the risk on companies. Without clear regulations, they are left to decide on the best course of action. That’s why many are now becoming more hesitant. Conflicting Views from Tech Leaders When it comes to deploying new technologies, businesses often look to tech leaders. If a tech giant adopts a new innovation, it’s often seen as a green light for other companies to follow suit. So, when a company as influential as offers mixed signals regarding a technology, the ripples are felt across industries. Microsoft On the one hand, Microsoft has expressed reservations about the use of Generative AI tools. In January, Microsoft warned employees not to share ‘sensitive data’ with ChatGPT. https://twitter.com/BusinessInsider/status/1620528535017345025?embedable=true But Microsoft also champions its own version of the technology, Azure ChatGPT. This iteration promises a safer and more controlled environment for corporate users. This move raises questions: Is Azure ChatGPT genuinely immune to the risks Microsoft has pointed out in the broader Generative AI landscape? Or is this a strategic maneuver to ensure businesses stay within Microsoft’s ecosystem? The Balance of Adopting ChatGPT When evaluating any new technology, businesses are often caught in a tug-of-war between the potential benefits and the potential pitfalls. With ChatGPT, companies seem to be adopting a wait-and-see approach. As the technology and its regulations evolve, the hope is that a safer, more transparent use can be established. For now, ChatGPT is great for a bit of coding help and content. But I wouldn’t trust it with proprietary data.

75% Of Companies Are Banning the Use of ChatGPT: What Happened?

75% কোম্পানি ChatGPT ব্যবহার নিষিদ্ধ করছে: কি হয়েছে?

75 % der Unternehmen verbieten die Nutzung von ChatGPT: Was ist passiert?

El 75% de las empresas están prohibiendo el uso de ChatGPT: ¿Qué pasó?

75 % des entreprises interdisent l’utilisation de ChatGPT : que s’est-il passé ?

75% कंपनियाँ चैटजीपीटी के उपयोग पर प्रतिबंध लगा रही हैं: क्या हुआ?

75% の企業が ChatGPT の使用を禁止しています:何が起こったのでしょうか?

75%의 회사가 ChatGPT 사용을 금지하고 있습니다. 무슨 일이 일어났나요?

75% das empresas estão proibindo o uso do ChatGPT: o que aconteceu?

75% компаний запрещают использование ChatGPT: что произошло?

Şirketlerin %75'i ChatGPT Kullanımını Yasaklıyor: Ne Oldu?

75% công ty đang cấm sử dụng ChatGPT: Chuyện gì đã xảy ra?

75% 的公司禁止使用 ChatGPT：发生了什么？

These Customer Service Reps Have to Pay to Talk to You

Stories, News & Mentions about CYBERHAVEN

Categories

Trending Topics

Stories, News & Mentions about CYBERHAVEN

Cyberhaven’s Stories on HackerNoon

Cyberhaven's News & Mentions

Categories

Trending Topics