bug-bounty497
xss260
rce139
google120
bragging-post118
facebook117
malware116
account-takeover112
privilege-escalation111
microsoft99
open-source97
authentication-bypass96
csrf84
exploit83
access-control77
stored-xss75
cve74
phishing72
web-security67
ai-agents66
reflected-xss63
input-validation53
information-disclosure52
reverse-engineering52
ai-security51
tool51
sql-injection51
cross-site-scripting50
api-security50
smart-contract49
privacy48
defi48
ethereum46
vulnerability-disclosure45
apple44
ssrf44
supply-chain41
opinion40
web-application39
llm39
automation38
burp-suite37
web336
responsible-disclosure36
writeup36
credential-theft35
race-condition35
remote-code-execution35
dos34
smart-contract-vulnerability33
0
3/10
Urban VPN's Chrome extension was discovered covertly collecting users' private AI chat conversations and exfiltrating them to company servers for resale. Despite Google removing the extension after public disclosure, the company quietly relisted it and it now appears as a top-ranked result for VPN and privacy extensions in the Chrome Web Store.
malware
spyware
browser-extension
chrome-web-store
data-exfiltration
privacy-violation
app-store-abuse
urban-vpn
Google
Urban VPN
Chrome Web Store
Malwarebytes
CSO Online
Koi.ai