Episode

Your AI sidekick might be a spy.

Podcast
Research Saturday
Published
Mar 14, 2026
Duration seconds
1367
Processing state
not_requested
Canonical source
https://thecyberwire.com/podcasts/research-saturday/416/notes
Audio
https://pdst.fm/e/pdrl.fm/6ec23a/traffic.megaphone.fm/CYBW9854407143.mp3?updated=1773268372
JSON
/v1/public/podcasts/research-saturday-1377435/episodes/your-ai-sidekick-might-be-a-spy
Markdown
/podcast/research-saturday-1377435/your-ai-sidekick-might-be-a-spy.md

Actions

  • POST https://stenobird.com/v1/public/podcasts/research-saturday-1377435/episodes/your-ai-sidekick-might-be-a-spy/transcription-requests
    Idempotently request low-priority transcript generation for this episode.
  • GET https://stenobird.com/podcast/research-saturday-1377435/your-ai-sidekick-might-be-a-spy.md
    Read the agent-friendly Markdown representation of this episode resource.

Summary

This week, we are joined by Or Eshed, Co-Founder and CEO from LayerX Security, discussing their work on "How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts." Researchers uncovered a coordinated campaign of 16 malicious browser extensions posing as ChatGPT productivity tools while secretly stealing user accounts. The extensions intercept ChatGPT session authentication tokens and send them to attacker-controlled servers, allowing threat actors to impersonate users and access their conversations, files, and connected services like Google Drive or Slack. The findings highlight how AI-focused browser extensions are creating a new attack surface, emphasizing the need for organizations to closely monitor and restrict third-party AI tools. The research can be found here: ⁠⁠⁠How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts