LinkedIn scans users' installed browser extensions and encrypts the data into every request sent to its servers, according to privacy research. The practice affects millions of users without explicit consent.
Security researchers discovered that LinkedIn identifies 6,278 different browser extensions on user devices and includes encrypted extension data in HTTP requests. The company collects information about which extensions are installed, potentially revealing user behavior, productivity tools, and security software.
LinkedIn encrypts this data but still transmits it with every request, making it difficult for users to detect or opt out of the scanning. The practice raises privacy concerns, as extension data can infer sensitive information about browsing habits and security measures.
The discovery sparked discussion on Hacker News, with 121 points and 32 comments. Users questioned whether LinkedIn discloses this data collection in its privacy policy and whether it shares the information with third parties.
LinkedIn has not publicly commented on the findings. The practice highlights how major platforms collect detailed information about user device configurations beyond their primary services.
A new macOS malware called CrashStealer disguises itself as Apple's crash-reporting tool to steal credentials, keychain data, and cryptocurrency wallets from infected systems.
Security firm Jscrambler disclosed that attackers published a malicious version of its npm package, which was downloaded nearly 1,500 times before detection. The compromised package contained infostealer malware targeting developer systems.
Security researchers are turning prompt injection attacks into a defensive weapon. The technique, called "context bombing," forces malicious AI agents to shut down before causing damage.
The Los Angeles Police Department has allowed its contract with surveillance company Flock to expire, citing serious civil liberties and privacy concerns. The move marks a significant departure for one of Flock's largest government customers.