» Tag
data-exfiltration
6 postsPopular ModHeader Chrome Extension Exfiltrates User Data
Reverse engineering reveals ModHeader, a 1.6M-install Chrome extension, secretly exfiltrates encrypted browsing data via a hidden AES-GCM pipeline.
I Red-Teamed My Own LLM Security Gateway: Every Gap, Four Passes
An engineer red-teamed his own LLM security proxy across four passes, exposing secret-leak and prompt-injection gaps — including one still open in streaming.
Chrome Extension Secretly Exfiltrates AI Prompts to Vendor Servers
A Chrome extension silently captures and exfiltrates AI prompts and responses from 9 platforms, contradicting its own privacy store declaration.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comResearcher Tricks Claude Into Leaking User Secrets via Web Fetch
How a researcher exploited Claude's memory and web_fetch tool to silently exfiltrate a user's name, employer, and security answers letter by letter.
AI Coding CLI Uploads Entire Git History, Bypassing Privacy Opt-Out
An AI coding CLI was found silently uploading full Git history and secrets to vendor storage, bypassing the privacy opt-out users trusted.
CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower
The CoSnitch vulnerability in Microsoft Copilot reveals the risks of AI assistants in data exfiltration.