zk

Malicious Google Chrome extensions have stolen large language model (LLM) conversations and browser data from hundreds of thousands of users.
Application security vendor Ox Security detailed a campaign in a recent research blog involving malicious Google Chrome extensions posing as legitimate extensions from a company called AItopia that adds a sidebar on websites that enables chats with popular LLMs like ChatGPT and DeepSeek.
Ox researchers found that two extensions were copying the functionality of the legitimate app while also exfiltrating user conversation and browsing data to a command-and-control (C2) server. One, titled "ChatGPT for Chrome with GPT-5, Claude Sonnet & DeepSeek AI," had more than 600,000 users and a Google Chrome "Featured" badge, while the other, "AI Sidebar with Deepseek, ChatGPT, Claude and more," had over 300,000.
Stay alert, the extensions according to 0x Security have been already removed, I would not be surprised if new ones are already in the store...

2026-02-09 05:37:47 UTC

👀
#nevent1q…tkhl

2026-01-26 21:39:33 UTC

"You'd have to be braindead to believe WhatsApp is secure in 2026. When we analyzed how WhatsApp implemented its "encryption," we found multiple attack vectors"
-- Pavel Durov, co-founder of the Telegram messenger.
#WhatsApp

2026-01-24 20:06:56 UTC

Make this viral!
#nevent1q…dukq

2026-01-23 13:52:58 UTC

- reply

No, I have not, best wishes! Stay safe!

2026-01-21 15:45:18 UTC

- reply

Btcmap.org I believe is your best bet to find some.
As of places to check out, that country is filled with them, in the South Seville is something incredible, Marbella is a location to check out, La Alhambra in Granada is just incredible. More to the center Madrid alone will take you a couple of days just for landmarks like the Museo Del Prado, Plaza España, Puerto del Sol, Plaza Mayor (a must), Mercado de San Miguel, Parque El Retiro, Plaza Cibeles, Gran Via... The list goes on... And surrounding Madrid, I would recommend Segovia, Avila, Cuenca and Toledo. More to the North, beside the obvious Barcelona, you have many options, from wine tasting in La Rioja to the magical Asturias or the iconic San Sebastian... Enjoy!

2026-01-20 06:26:54 UTC

4 in 5 small businesses had cyberscams last year, almost half were AI powered...
https://databreaches.net/2026/01/18/4-in-5-small-businesses-had-cyberscams-last-year-almost-half-were-ai-powered/?pk_campaign=feed&pk_kwd=4-in-5-small-businesses-had-cyberscams-last-year-almost-half-were-ai-powered

2026-01-19 19:53:54 UTC

Stay alert!
https://thehackernews.com/2026/01/five-malicious-chrome-extensions.html

2026-01-19 11:21:02 UTC

- reply

Interesting, hard to believe it took them so long

2026-01-19 10:11:12 UTC

- reply

That is a good summary, love the comparison table.

2026-01-17 10:03:30 UTC

- reply

👀

2026-01-12 19:24:36 UTC

- reply

What a mess...

2025-12-18 10:39:38 UTC

https://www.darkreading.com/endpoint-security/chrome-extension-harvests-ai-chatbot-data

2025-12-13 20:12:47 UTC

Time to move your residence out of France...
#nevent1q…08g3

2025-12-10 00:23:02 UTC

- reply

It will be depending on the person you are on boarding...
A normie non tech savvy and little to none understanding of the power of decentralization and relay management.
Primal or Damus for mobile or desktop.
A tech savvy individual understanding the above and whom consider his CyberSec as a serious matter:
Android: Amethyst @nprofile…wywf , 0xchat
iOS: 0xChat @nprofile…wj7d
Desktop: nostrudel.ninja

2025-12-09 17:27:22 UTC

- reply

Bookmarked

2025-12-05 23:40:39 UTC

- reply

Yep, all risk assets will get a boost, at least in theory

2025-12-03 11:39:39 UTC

ℹ️ For those that reside outside of USA and think thausing Amazon, Google and Microsoft cloud services or any USA cloud service is secure and private for them:
. The US CLOUD Act from 2018, allows the US Government (and therefore their partners) data access regardless of storage location.
. Be smart, self host your data, and if you insist in doing it wrong, encrypt your data before you upload anywhere.
https://www.justice.gov/criminal/cloud-act-resources?ref=itsfoss.com

2025-12-02 10:51:39 UTC

- reply

True and wise

2025-12-01 08:42:08 UTC

- reply

You nailed the 85K

2025-12-01 07:26:21 UTC

Season Messenger is listening to its users, read on, PFS will be back and quantum resistent cryptography is being implemented among other features.
https://getsession.org/blog/session-protocol-v2
#session
#privacy
#messenger

2025-11-30 21:06:59 UTC

- reply

It have been a long waiting, although the real liquidity will start really getting in from Feb to Mar 2026 nevertheless, the QT ending is already bullish for Bitcoin and other risks assets

2025-11-28 18:10:39 UTC

- reply

And QE in two days, that one is even more important, the liquidity won't be sudden but the FOMO is!

2025-11-27 19:48:49 UTC

- reply

https://media.tenor.com/AQz3_zaiD14AAAAC/hysterical-laughter.gif

2025-11-27 12:38:08 UTC

- reply

#Bitcoin, self custody and risk management, reading the changes day by day, be ready to relocate fast, most will not do that, most are screwed unless this turn a surprising positive outcome, that, IMO is unlikely

2025-11-25 06:39:02 UTC

- reply

Good question, the USA administration for once, but the previous one probably was more pro war. But your question is good, what else changed, curious what people will come up with if any...

2025-11-25 06:18:21 UTC

- reply

Good post! 👊

2025-11-23 21:57:54 UTC

- reply

Mint will work fine

2025-11-20 06:34:44 UTC

- reply

I am assuming already most hacks are AI assisted and they will get way more sophisticated

2025-11-19 20:33:18 UTC

True story, but soon, that won't be an issue, LLMs are going to replace most of us in many areas and FOSS developers will probably be in the early list. I'll give it 5 years tops.
https://itsfoss.com/news/open-source-developers-are-exhausted/

2025-11-06 10:24:23 UTC

Not that most of you give two cents about it since most don't care about privacy, but if you are one of those rare special individuals, stay away from ChatGTP
#ChatGTP
In yet another "Your chatbot may be leaking" moment, researchers have uncovered multiple weaknesses in OpenAI's ChatGPT that could allow an attacker to exfiltrate private information from a user's chat history and stored memories.

2025-11-04 09:53:31 UTC

LOL!
You can't make this shit up
#nevent1q…49cd

2025-11-04 09:51:51 UTC

- reply

FAFO...

2025-10-31 16:21:48 UTC

- reply

At the end we need to find balance, it is a tool, we just need to use it wisely.

2025-10-31 16:18:10 UTC

- reply

npub.cash does the job quite well, additionally, you may want to test as well the @nprofile…lgp7 wallet, which is integrated with npub.cash addresses

2025-10-30 02:53:05 UTC

- reply

lawyers will be lawyers ...

2025-10-30 02:51:29 UTC

- reply

A piece of paper. HW are overrated, convenient, but all have their flaws and pros and cons...

2025-10-29 03:21:05 UTC

A small number of samples can poison LLMs of any size
https://www.anthropic.com/research/small-samples-poison

2025-10-22 18:49:24 UTC

- reply

Install Linux Mint (coming from iOS this Linux distro will be a soft landing and it is getting traction)

2025-10-21 01:37:36 UTC

- reply

Signal Messenger is Open Source as SimpleX, more over, both have upgraded their encryption to level of quantum resistant...
This matters, most believe that if you are using a service that is e2ee you are good, but you are not.
Why?
Cyber Criminals and I will assume most three letter agencies are collecting all raw data they can from centralized services/servers and storing them for future decryption, clearly, if your cloud service is not upgraded or your messenger service is not resistant, all the data will be open for cyber criminals and agencies to look at...
I keep advising family, friends and clients, stay away from centralized services if possible and if not, verify they are upgraded if they use encryption

2025-10-21 01:27:01 UTC

- reply

You are probably missing a relay supporting private DMs
Try adding,
wss://auth.nostr1.com/

2025-10-17 00:37:03 UTC

- reply

Yes, npub.cash is not generating invoices, tried to swap with Minibits, same issue...

2025-10-16 00:44:12 UTC

Nice move, hopefully Elon Musk will be next to let the public know the names of the politicians pushing to remove our free speech.
And the cherry of the pie, the rules do not apply to politicians... The irony, their affairs should be public, yet they do want privacy to cover their corruption.
https://image.nostr.build/d21c9e1e8073f04f723f61803dc4106e2db03822c103a7be66dc5f05e0d893bc.jpg

2025-10-07 12:11:36 UTC

🚨 Harden your Windows systems using free, trusted open-source tools that cover audit, configuration, and monitoring. You don't need enterprise tools to raise your defense baseline — just a few solid steps.
Quick Actions (Under 30 Minutes):
• Run Hardentools — disable unsafe defaults instantly.
• Use CIS-CAT Lite — identify missing patches, open RDP, or weak policies.
• Check Local Admins — remove unused accounts, deploy LAPS for password rotation.
• Turn On Logging — enable PowerShell, Windows Defender, and Audit Policy logs.
• Run WinAudit — export a report and compare it weekly for unauthorized changes.
• Scan with Wazuh or OpenVAS — look for outdated software or exposed services.
Key Risks to Watch:
🔑 Reused or shared admin passwords
🌐 Open RDP/SMB without firewall or NLA
⚙️ Old PowerShell versions without logging
🧩 Users running with local admin rights
🪟 Missing Defender Attack Surface Reduction (ASR) rules
📦 Unpatched or unsigned software from third-party repos

2025-10-07 11:05:57 UTC

🚨 Mobile Apps Leak Data — New findings from Zimperium have revealed that one in three Android apps and more than half of iOS apps leak sensitive data. Nearly half of mobile apps contain hard-coded secrets such as API keys
Keep your mobile clean, remove all apps not really needed and be mindful of the ones you install and keep.

2025-10-02 06:55:54 UTC

🚨 A group of academics from KU Leuven and the University of Birmingham has demonstrated a new vulnerability called Battering RAM to bypass the latest defenses on Intel and AMD cloud processors. "We built a simple, $50 interposer that sits quietly in the memory path, behaving transparently during startup and passing all trust checks," researchers Jesse De Meulemeester, David Oswald, Ingrid
And just like that billions invested in HW security gone, back to the drawing table for Intel and AMD, and those researchers... making this public before a solution is deployed, not cool.

2025-10-02 06:52:19 UTC

🚨 Cybersecurity researchers have flagged a previously undocumented Android banking trojan called Datzbro that can conduct device takeover (DTO) attacks and perform fraudulent transactions by preying on the elderly.
Take time and educate your elders.

2025-09-26 10:58:42 UTC

- reply

LOL!
Being there myself so many times, it is sad but true...
I am forecasting a change soon thanks to LLMs, tech savvy markets like China, India and Russia are loaded with excellent engineers and enthusiasts that will for sure leverage LLMs power and come with alternatives, perhaps optimizing current kernels, perhaps making one from scratch more intelligent and compatible.
But the problem your friend has is the same one as usual, running a laptop with proprietary close source HW always will be an issue with Linux or any other new OS...
Solution:
Sucks but for laptops:
Get a USB Bluetooth 5.0 dongle
Get a cheap 2K BT web cam or USB (I prefer BT)
A USB hub with two slots (small not to bother)
All will work, but is not pretty nor ideal. This solution overcomes the propiertary HW issue most people have with their PC, specially those with the POS "Intel", avoid buying that garbage anytime you can, AMD is a better solution, for now...

2025-09-24 09:30:00 UTC

- reply

cool one! :)

2025-09-18 07:59:03 UTC

🚨 Google on Wednesday released security updates for the Chrome web browser to address four vulnerabilities, including one that it said has been exploited in the wild.
The zero-day vulnerability in question is CVE-2025-10585, which has been described as a type confusion issue in the V8 JavaScript and WebAssembly engine.
#vulnerability

2025-09-13 19:01:51 UTC

- reply

Fun!

2025-09-13 18:43:19 UTC

🚨 Chinese censorship sprang a major leak on September 11, when researchers confirmed that more than 500GB of internal documents, source code, work logs, and internal communications from the so called Great Firewall were dumped online, including packaging repos and operational runbooks used to build and maintain China’s national traffic filtering system.
This is hailed as a "game changer" for circumvention tools (e.g., VPNs) and research into GFW vulnerabilities.
VPN providers will learn from these documents probably a lot about DPI and how to circumvent it.

2025-09-12 14:47:20 UTC

- reply

you will receive zaps in the LN address you set in your profile.
https://image.nostr.build/8073533efcd0216717ed6994247f051ef743f9dd03104830ed72fcea5514523d.jpg
to access you sats use npub.cash wallet or 0xchat wallet, you can withdraw to Minibits or any other wallet that supports cashu and LN.

2025-09-12 07:45:00 UTC

🚨 A security weakness has been disclosed in the artificial intelligence (AI)-powered code editor Cursor that could trigger code execution when a maliciously crafted repository is opened using the program.

2025-09-09 23:10:45 UTC

- reply

the comment of the day!

2025-09-09 18:17:51 UTC

- reply

nah, just to study more and setup yourself with the best possible OpSec for your specific user case.

2025-09-08 18:58:11 UTC

- reply

true

2025-09-08 18:57:48 UTC

- reply

not easy but good OpSec

2025-09-08 18:57:08 UTC

- reply

love it

2025-09-08 18:56:46 UTC

- reply

no, at least not yet, just learn

2025-09-08 18:51:44 UTC

- reply

ha! good catch, and an important one!

2025-09-08 16:41:06 UTC

Today, after a long discussion about best OpSec practices I thought it will be nice to share with the Nostr community, and read what others have to say about it,
There are many here in #Nostr that are #privacy advocates and believe they know enough, they use what they believe is a secure OpSec:
1. No corporate social networks, that includes LinkedIn or not sufficient decentralized ones (whatever that means for them).
2. No Messenger Chat app that requires a mobile phone number.
3. Linux of course; so they say; although the majority keep using iOS or Microsoft as their default OS... (I am guessing of course, but I am quite positive it is a good guess ... ).
4. A Pixel 7 or higher rooted with the right OS.
5. A VPN, one of the few that do not log (so they say) and you can pay cash or LN BTC or XMR. Most do this wrong BTW...
6. The right Private DNS, never a corporate one...
7. A private email address, so most will use Proton or Tuta... Odd how there are only few options with no KYC, if it is a niche, the fact that there are no more options is suspect, two companies only... they become a honeypot.
8. They use FOSS as much as possible for all their work and location apps.
9. GPS OFF as a norm. OpSec matters here, most people do this wrong.
10. A nonKYC eSIM with only data, few providers, silentlink being one of the favorites.
11. A powerful router with firewall and Pihole or adguard, plus built in support for VPN (most do this wrong)
12. Self hosted cloud, no commercial cloud never (most don't do this, they rely on the usual privacy oriented, the ones very well known, there are about 3...) Are you paying attention?
13. Their own BTC Node
14. A privacy oriented browser, there are not that many, Mullvad Browser, hardened with extension Firefox (requires work), hardened with extensions Brave. Most use the same extensions, for they are the recommend ones, Have you wondered why they are not built in already in the browsers?
14 Tor Browser for research, specially those that are devs or white hats... (no black or grey hats here, right...)
16. Keeping all your software and OS for all devices up to date, which is recurrent workload, failing to do that could lead to exploits and exposure to cybercrime.
And more, but this is a simple summary.
Now the best part:
All of the above, makes you, in a way, a target, for your digital footprint is of a minority, easy to identify, you are decently informed and therefore you follow the same rules and use the same tools as the rest of a small tribe, a very distinct one, not that hard to identify with the right tools that constantly analyze metadata.
Is there a better way?
In my opinion, yes.
1. If you keep your current OpSec, study and do it right, most do it wrong and generally due to lack of discipline and endurance of the annoyance of cyber security, which is very inconvenient, end up being not only known targets but vulnerable high end targets.
2. To be part of the large noise made by the clueless normies is the optimal play but that is an OpSec very few will have the discipline, time and knowledge to do correctly. Won't discuss the know how here. Hire a #cybersecurity expert if you want this and don't know how is done.
What are your thoughts?
#asknostr

2025-09-07 21:47:37 UTC

🚨 A federal jury awarded plaintiffs suing Google $425 million in damages, holding that by collecting the data of users who had switched off an app activity-tracking feature, the tech giant invaded the privacy of millions.
More Google lies caught, but... 425 million dollars and all is well, they will keep doing it for sure. I wonder, How many times will take for true accountability? Problem is, there is not a real incentive for them to stop.

2025-09-06 22:00:03 UTC

- reply

- LNVPN (https://lnvpn.net/)
- encryptSIM (https://www.encryptsim.com/)
both accept cryptocurrency payments (Bitcoin, Monero, etc.).
Did you have a bad experience with Silent Link? Please share , IMO they are e excellent, never an issue.

2025-09-06 20:42:56 UTC

- reply

Have to agree, in fact there are already clear signs this is building up, open source is fundamental for this to happen

2025-09-06 20:42:07 UTC

This
#nevent1q…adtu

2025-09-02 09:26:12 UTC

🚨 Cybersecurity researchers have discovered a malicious npm package that comes with stealthy features to inject malicious code into desktop apps for cryptocurrency wallets like Atomic and Exodus on Windows systems.

2025-08-30 08:29:32 UTC

🚨🚨🚨 Must read
https://bobdahacker.com/blog/hacked-biggest-chinese-robot-company

2025-08-30 07:12:55 UTC

- reply

Thanks!
When the Android apk repository in Github?

2025-08-29 22:16:17 UTC

- reply

In theory... I will wait until it is seen in Github, currently no Github link to be found, hopefully one will show up soon...

2025-08-29 11:14:40 UTC

- reply

it makes sense

2025-08-29 08:16:09 UTC

This will be interesting...
#nevent1q…p0h9

2025-08-29 08:11:29 UTC

🚨 Overnight on Aug. 26 in just over four hours, unidentified attackers compromised more than 1,000 Javascript developers, stealing their GitHub tokens, npm tokens, SSH keys, application secrets, and cryptocurrency wallet files.
They pulled that off by infecting a widely popular build system called "Nx" and by infusing their supply chain malware with artificial intelligence (AI)-powered intel-gathering capabilities.
https://www.darkreading.com/cyberattacks-data-breaches/1000-devs-lose-secrets-ai-powered-stealer

2025-08-27 08:22:14 UTC

So from 2027, many programmers will move from Google store to Huawei store, not complicated and bigger market
https://news.itsfoss.com/new-android-sideloading-rules/

2025-08-23 20:23:20 UTC

- reply

Pretty much same results, waiting for new versions to test again. The current version, IMO shouldn't be in production.
BTW, 0xChat already supports NIP-EE, only advantage I see is for groups, current implemented EE2E messages in Nostr is good enough.

2025-08-22 20:29:49 UTC

- reply

It is wise to wait for reviews ... It will save you few heartburns for sure...

2025-08-22 20:27:04 UTC

Lumia's Yoav Magid Discusses Siri & Apple AI Privacy Risks
https://www.blackhat.com/us-25/briefings/schedule/index.html?_ga=2.185942305.92694596.1752608221-151668467.1748531774&_gac=1.11871104.1752608221.EAIaIQobChMIpfDOsc6_jgMVljcIBR0KWAL-EAAYASAAEgLMgvD_BwE#applestorm---unmasking-the-privacy-risks-of-apple-intelligence-44712

2025-08-21 06:11:10 UTC

If you are using FreeVPN Google chrome extension, unistall it, it is spyware, "Chrome verified"...
Here the findings:
https://www.koi.security/blog/spyvpn-the-vpn-that-secretly-captures-your-screen

2025-08-18 07:18:06 UTC

- reply

you are welcome!

2025-08-18 07:13:29 UTC

- reply

Okay, that is quite specific and a valid point, ironically, very easy to protect against it, it is just, a bit inconvenient.
Solution:
Get yourself a non smartphone for phone calls and SMS. The battery last like a week and you will need it mostly for insecure 2FA from decadent banks and services and not much more, unless you still use a mobile live to communicate with loved ones, strange nowadays but happens.
For data on your mobile use a mobile hostpost.
This opsec protects you from the SMS treat and from clicking on your mobile a link written in a SMS to a malicious site, some of this low end mobile have data and may have hotspost capability reducing opesec cost

2025-08-18 06:55:32 UTC

- reply

Good question,
Simple answer:
If you stick to Play Store and your mobile number is not listed in the dark web, I wouldn't bother.
Users are the weak link always:
- Clicking on a link we should not.
- Downloading a file we should not.
- Installing an app we should not.
Now, if you are a targeted individual, then you need to hire a cyber sec expert to build you a tailored opsec. It will be worth it and is most of the time more affordable than expected

2025-08-15 09:24:44 UTC

- reply

1. seedsigner (https://seedsigner.com/)
2. foundation (https://foundation.xyz/)
3. keystone (https://keyst.one/btc-only)
4. Coldcard (https://coldcard.com)
@nprofile…jwdq wrote a decent guide on choosing the right seed signer (aka Hardware Wallet)
https://rod.npub.pro/post/226453/

2025-08-12 05:04:57 UTC

### Korea wins world’s top hacking contest for 4th consecutive year
https://www.koreatimes.co.kr/business/tech-science/20250811/korea-wins-worlds-top-hacking-contest-for-4th-consecutive-year

2025-08-10 07:11:29 UTC

https://tuta.com/blog/ai-email-writers-review

2025-08-10 05:06:35 UTC

- reply

use hashtags to search your favorite topics and build your tribe, those "packs" are an echo chamber of nostr influencers taking to each other and adding little value to your knowledge and interest base.
you can search in the Global Instance any keyword without the hashtags too, find your tribe or create one. You can join groups/communities as well.
good luck

2025-08-10 05:01:36 UTC

- reply

There is not a perfect answer and unfortunately, the better the browser for privacy the less convenient:
#### For Desktop:
- Most secure ones (some sites won't work):
1. TOR Browser
2. Mullvad Browser
- Less Secure but way more convenient, you need to add extensions to upgrade your security and tweak your settings to remove browser garbage and improve privacy. They both support IPFS.
1. Brave Browser (you can sync across devices without an email account, quite convenient), profiles are quite convenient as well. VPN built in is paid only.
2. Opera Browser (you need an email address to sync devices, use a burner), the VPN built in is decent and with a free tear from the box.
#### For Mobile
- Most secure:
1. TOR Browser
- A bit less secure, but all sites work, requires tuning settings and adding extensions to improve security, as TOR, the Browser is FOSS.
1. Fennec
- Less secure and no extensions possible, needs privacy tunning in the settings, quite convenient and fast browsers for mobile, they both support IPFS.
1. Brave Browser
2. Opera Browser

2025-08-09 16:55:52 UTC

https://thehackernews.com/2025/08/researchers-uncover-gpt-5-jailbreak-and.html

2025-08-08 06:38:57 UTC

- reply

tried that too and worked for me as well, I assume their first release had the bug and they rolled a new version the same or next day

2025-08-05 05:46:18 UTC

https://visit.gitex.com/web/registration-portal/event-detail?eventId=252175&utm_source=tech-target-holdings&utm_medium=mediapartner&utm_campaign=20250723-gitexglobal25-visitors-partner
https://media.tenor.com/ZHKtctPnsxIAAAAC/excited-hockey.gif

2025-07-31 19:20:46 UTC

- reply

Some cybersec experts argue that having a password and 2FA app together in one app reduces your OpSec, I agree.
Having all your eggs in one basket is not ideal, best to keep it harder for the criminals.
Having in your Desktop Keepass for your passwords and not adding the 2FA to it (although is very convenient) is a better practice, now having Proton Authenticator for Desktop (Linux and Windows) is a good OpSec.
I agree the network connection is not ideal, but it is not needed, only if you wish to synch, just avoid it. In the Desktop firewall the app for no internet access. For the mobile, Aegis + Keepass ia a winning formula