ClickFix campaigns spread MacSync macOS infostealer via malicious Terminal commands since Nov 2025, targeting AI tool users and developers.

Technical details of the vulnerabilities will be revealed once the majority of users are updated with a fix, said Google.

How can an extension change hands with no oversight?

Google released an emergency update for Chrome on Friday night. It patches two security vulnerabilities that were attacked on the internet.

Many Chrome extensions start as small developer projects, and once they gain users, are sold on. But what if the new owner turns out to be a bad actor who gains the ability to update software running ...