Akamai acquires LayerX, delivering end-to-end security and real-time AI usage control

Learn More

LayerX Labs

Home Blog LayerX Labs
AI Risk Isn’t Distributed Evenly. Neither Should Your Security Strategy Be
Blog Post

AI Risk Isn’t Distributed Evenly. Neither Should Your Security Strategy Be

Most organizations think they understand their AI risk. They know employees are pasting sensitive data into ChatGPT. They have policies around approved AI tools. Some have even rolled out enterprise copilots and AI governance programs. But according to new research from LayerX, that’s not where the biggest AI blind spots are emerging. The report reveals […]

Or Eshed - June 1, 2026 Read more
CursorJacking: Every Cursor User Is Vulnerable to API Key Theft by Rogue Extensions
Blog Post

CursorJacking: Every Cursor User Is Vulnerable to API Key Theft by Rogue Extensions

Cursor doesn’t store API keys in protected storage, meaning any extension can access them. Cursor knew about this vulnerability but didn’t fix it. Executive Summary LayerX security researchers have found that any extension of the popular AI development tool Cursor can access the developer’s API keys and session tokens, leading to full credential compromise, with […]

Roy Paz - April 28, 2026 Read more
Extension Developers Sell The Data of At Least 6.5 Million Users – And It’s All Completely Legal
Blog Post

Extension Developers Sell The Data of At Least 6.5 Million Users – And It’s All Completely Legal

This isn’t a story about malware. Nobody hacked you. Nobody stole anything. The extensions you’re running right now may be selling your browsing data — and they told you they would. It’s right there in the privacy policy. Page 4. Paragraph 7. The one nobody reads.

Dar Kahllon & Guy Erez - April 26, 2026 Read more
StealTok: 130k Users Compromised by Data Stealing TikTok Video “Downloaders”
Blog Post

StealTok: 130k Users Compromised by Data Stealing TikTok Video “Downloaders”

  LayerX security researchers have uncovered a campaign of at least 12 interrelated browser extensions that masquerade as TikTok video downloaders but in reality track user activity and collect data. The extensions share a common codebase and are all clones or lightly modified versions of each other, indicating that this is a long-standing and persistent […]

Natalie Zargarov - April 20, 2026 Read more
Vibe Hacking: Claude Code Can Be Turned Into A Nation-State-Level Attack Tool With No Coding At All
Blog Post

Vibe Hacking: Claude Code Can Be Turned Into A Nation-State-Level Attack Tool With No Coding At All

  LayerX researchers have found how Claude Code can be turned from a ‘vibe’ coding tool into a nation-state-level offensive hacking tool that can be used to hack websites, launch cyberattacks, and research new vulnerabilities. Our research demonstrates how trivially easy it is to convince Claude Code to abandon its safety guardrails and remove its […]

Roy Paz - April 8, 2026 Read more
Poisoned Typeface: How Simple Font Rendering Poisons Every AI Assistant, And Only Microsoft Cares
Blog Post

Poisoned Typeface: How Simple Font Rendering Poisons Every AI Assistant, And Only Microsoft Cares

Executive Summary: LayerX researchers have discovered how a simple custom font can compromise every AI system in the market. With nothing more than a custom font and simple CSS, we created a webpage where the browser renders instructions that would lead the user to execute a reverse shell, while the DOM text analyzed by AI […]

Roy Paz - March 17, 2026 Read more
Any Extension Can Be Weaponized To Install Malware on Target Hosts
Blog Post

Any Extension Can Be Weaponized To Install Malware on Target Hosts

Executive Summary: Invisible Threats Can Easily Turn a Chrome Extension into a Host-Level RCE Since they were introduced, browser extensions have been treated as lightweight productivity tools — harmless add-ons that live somewhere between bookmarks and settings. They are installed casually, updated silently, and rarely scrutinized once they become part of a user’s daily workflow. […]

Iyar Segev - March 3, 2026 Read more
“AiFrame”- Fake AI Assistant Extensions Targeting 260,000 Chrome Users via injected iframes
Blog Post

“AiFrame”- Fake AI Assistant Extensions Targeting 260,000 Chrome Users via injected iframes

Contributors: Dar Kahllon As generative AI tools like ChatGPT, Claude, Gemini, and Grok become part of everyday workflows, attackers are increasingly exploiting their popularity to distribute malicious browser extensions. In this research, we uncovered a coordinated campaign of Chrome extensions posing as AI assistants for summarization, chat, writing, and Gmail assistance. While these tools appear […]

Natalie Zargarov - February 12, 2026 Read more
Claude Desktop Extensions Exposes Over 10,000 Users to Remote Code Execution Vulnerability
Blog Post

Claude Desktop Extensions Exposes Over 10,000 Users to Remote Code Execution Vulnerability

  Summary: LayerX discovered a zero-click remote code execution (RCE) vulnerability in Claude Desktop Extensions (DXT), in which a single Google Calendar event can silently compromise a system running Claude Desktop Extensions. The flaw impacts more than 10,000 active users and 50 DXT extensions.  Unlike traditional browser extensions, Claude Desktop Extensions run unsandboxed with full […]

Roy Paz - February 9, 2026 Read more
How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts
Blog Post

How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts

LayerX Research identified a coordinated set of Chrome browser extensions marketed as ChatGPT enhancement and productivity tools. In practice, however, these extensions are meant to steal users’ ChatGPT identities. The campaign consists of at least 16 distinct extensions developed by the same threat actor, in order to reach as wide a distribution as possible. This […]

Natalie Zargarov - January 26, 2026 Read more