LayerX Labs

Home Blog LayerX Labs
Introducing ExtensionPedia: Your Ultimate Resource to Assess and Mitigate Browser Extension Risks
Blog Post

Introducing ExtensionPedia: Your Ultimate Resource to Assess and Mitigate Browser Extension Risks

LayerX is proud to announce the launch of ExtensionPedia, the Browser Extension Risk Database and Knowledge Center, for immediate general availability! Browser extensions significantly enhance productivity, streamline workflows, and personalize user experiences. Yet, beneath their convenience lies a hidden threat—malicious extensions posing serious risks to identity security, data privacy, and organizational integrity. The Hidden Risks […]

Or Eshed - May 05, 2025 Read more
LayerX Reveals 40+ Malicious Browser Extensions
Blog Post

LayerX Reveals 40+ Malicious Browser Extensions

LayerX has identified over 40 malicious browser extensions that are part of three distinct phishing campaigns. The initial detection of this campaign was done by the DomainTools Intelligence (DTI) team, who identified a list of suspicious domains that were communicating with browser extensions masquerading as legitimate brands. However, while the research by DTI provided a […]

Michelle Warburg - May 05, 2025 Read more
Introducing Full Conversation Tracking: The Next Step in GenAI Data Protection
Blog Post

Introducing Full Conversation Tracking: The Next Step in GenAI Data Protection

GenAI Security – Or Insecurity – Is In Your Hands GenAI tools like ChatGPT, Gemini, and Copilot are hot topics among employees. Their adoption is growing among the enterprise employees, as expected, while the software developers are of the highest consumers of GenAI, with almost 40% and sales and marketing professionals are just after with […]

Michelle Warburg - May 05, 2025 Read more
Copy, Paste, Escape: The growing risk of fileless data movement and risk in browsers
Blog Post

Copy, Paste, Escape: The growing risk of fileless data movement and risk in browsers

In the modern corporate environment, web browsers have become indispensable tools for daily operations. Recent studies indicate that the average employee spends over 85% of their workday using a browser. This heavy reliance on browsers, while enhancing productivity, also introduces significant security challenges, particularly concerning fileless data movement. As security and DLP experts face daily […]

Michelle Warburg - March 03, 2025 Read more
LayerX Labs Identifies New Phishing Campaign Targeted at Mac Users
Blog Post

LayerX Labs Identifies New Phishing Campaign Targeted at Mac Users

A new phishing attack campaign, targeting Mac users and identified by LayerX Labs, shows the trials and tribulations of combating online phishing, and how attacks morph and shift in response to adaptations by security tools. For the past few months, LayerX has been monitoring a sophisticated phishing campaign that initially targeted Windows users by masquerading […]

Or Eshed - March 03, 2025 Read more
The Enterprise GenAI Data Security Report 2025: How Enterprises Consume GenAI Tools
Blog Post

The Enterprise GenAI Data Security Report 2025: How Enterprises Consume GenAI Tools

GenAI has become an essential component in the employee toolkit. Yet, going beyond bombastic headlines such as these, actual quantitative data about how AI applications are being used remains surprisingly scarce. At LayerX, our enterprise browser extension provides us with visibility into users’ activities in the browser, where GenAI application usage takes place. We can […]

Or Eshed - March 03, 2025 Read more
Attack Campaign Targeting Browser Extensions: What Happened, Who’s Impacted, How to Protect Yourself, and How LayerX Can Help (Rolling Updates)
Blog Post

Attack Campaign Targeting Browser Extensions: What Happened, Who’s Impacted, How to Protect Yourself, and How LayerX Can Help (Rolling Updates)

Last updated: December 30th, 2024 This blog thread is tracking the unfolding global attack campaign targeting browser extensions on the Chrome Web Store. We will update new details as they become available. Summary On December 27, 2024, cybersecurity startup Cyberhaven disclosed that an attack has compromised its browser extension and injected malicious code into it. […]

Or Eshed - December 12, 2024 Read more
How a Simple DocuSign Email Could Have Cost Us Everything: A Close Call with Phishing
Blog Post

How a Simple DocuSign Email Could Have Cost Us Everything: A Close Call with Phishing

During the past few weeks, LayerX Labs identified a phishing campaign that impersonates legitimate DocuSign emails, attempting to trick victims into revealing sensitive information. Here’s what happened, and how LayerX prevented a potential security disaster. It started like any other Monday morning. Sarah, a senior account manager (a fictional character for illustration purposes), was going […]

Or Eshed - November 11, 2024 Read more
LayerX Labs Identifies New AI Attack Vector: GPT Masquerading Attacks
Blog Post

LayerX Labs Identifies New AI Attack Vector: GPT Masquerading Attacks

LayerX Labs has identified a novel attack vector for malicious actors to try and extract sensitive data from unsuspecting users: GPT Masquareding Attacks.  In this attack, hackers impersonate legitimate GPTs hosted on OpenAI’s ChatGPT platform in order to lure users to fake versions of those GPTs and send the data that users share with the […]

Or Eshed - October 10, 2024 Read more
LayerX Labs Identifies New Zero-Hour Phishing Attack Mimicking Microsoft Security Notifications
Blog Post

LayerX Labs Identifies New Zero-Hour Phishing Attack Mimicking Microsoft Security Notifications

LayerX Labs identified a new zero-day phishing campaign that impersonates Microsoft security notifications to lure victims into sharing their login credentials and payment details.  The attack mimics a Microsoft Windows Defender security alert, urging users to call a hotline number, enter their credentials, and provide payment to the call center to ‘secure’ their computer.  This […]

Or Eshed - October 10, 2024 Read more