Episode
Your AI sidekick might be a spy.
- Podcast
- Research Saturday
- Published
- Mar 14, 2026
- Duration seconds
- 1367
- Processing state
not_requested- Canonical source
- https://thecyberwire.com/podcasts/research-saturday/416/notes
Actions
POST https://stenobird.com/v1/public/podcasts/research-saturday-1377435/episodes/your-ai-sidekick-might-be-a-spy/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/research-saturday-1377435/your-ai-sidekick-might-be-a-spy.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
This week, we are joined by Or Eshed, Co-Founder and CEO from LayerX Security, discussing their work on "How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts." Researchers uncovered a coordinated campaign of 16 malicious browser extensions posing as ChatGPT productivity tools while secretly stealing user accounts. The extensions intercept ChatGPT session authentication tokens and send them to attacker-controlled servers, allowing threat actors to impersonate users and access their conversations, files, and connected services like Google Drive or Slack. The findings highlight how AI-focused browser extensions are creating a new attack surface, emphasizing the need for organizations to closely monitor and restrict third-party AI tools. The research can be found here: How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts