Get the latest tech news
Malicious extensions can use ChatGPT to steal your personal data - here's how
Browser extensions can access the prompts of commercial and internal AIs to snag your sensitive data, says LayerX. But there are ways you can protect yourself.
With that level of access, a malicious extension could run prompt injection attacks to change the user's input or add hidden instructions. This includes third-party web-based services like ChatGPT, Claude, Google Gemini, and Microsoft Copilot, as well as internal LLMs and similar tools. For the business world, LayerX worked with Google to add its extension risk scoring feature directly into the Chrome for Enterprises browser.
Or read this on ZDNet