{"podcast":{"title":"Research Saturday","slug":"research-saturday-1377435","podcast_index_feed_id":1377435,"rss_url":"https://feeds.megaphone.fm/cyberwire-research-saturday","website_url":"https://thecyberwire.com/podcasts/research-saturday","image_url":"https://megaphone.imgix.net/podcasts/720fb496-dcfb-11ea-a475-bbdae30535a9/image/8f3cd4038c81bba2a8ea4ca89f3e23c4.png?ixlib=rails-4.3.1&max-w=3000&max-h=3000&fit=crop&auto=format,compress","author":"N2K Networks Inc.","episode_count":458,"summary":"Every Saturday, we sit down with cybersecurity researchers to talk shop about the latest threats, vulnerabilities, and technical discoveries.","last_synced_at":"2026-07-26T04:20:01.844149+00:00","page_url":"https://stenobird.com/podcast/research-saturday-1377435"},"episode":{"title":"Your AI sidekick might be a spy.","slug":"your-ai-sidekick-might-be-a-spy","published_at":"2026-03-14T05:00:00+00:00","page_url":"https://stenobird.com/podcast/research-saturday-1377435/your-ai-sidekick-might-be-a-spy","show_page_url":"https://stenobird.com/podcast/research-saturday-1377435","url":"https://thecyberwire.com/podcasts/research-saturday/416/notes","audio_url":"https://pdst.fm/e/pdrl.fm/6ec23a/traffic.megaphone.fm/CYBW9854407143.mp3?updated=1773268372","summary":"This week, we are joined by Or Eshed, Co-Founder and CEO from LayerX Security, discussing their work on \"How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts.\" Researchers uncovered a coordinated campaign of 16 malicious browser extensions posing as ChatGPT productivity tools while secretly stealing user accounts. The extensions intercept ChatGPT session authentication tokens and send them to attacker-controlled servers, allowing threat actors to impersonate users and access their conversations, files, and connected services like Google Drive or Slack. The findings highlight how AI-focused browser extensions are creating a new attack surface, emphasizing the need for organizations to closely monitor and restrict third-party AI tools. The research can be found here: ⁠⁠⁠How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts","meta_description":"This week, we are joined by Or Eshed, Co-Founder and CEO from LayerX Security, discussing their work on \"How We Discovered A Campaign of 16 Malicious Exte…","key_points":[],"chapters":[],"topics":[],"duration_seconds":1367,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/research-saturday-1377435/episodes/your-ai-sidekick-might-be-a-spy/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/research-saturday-1377435/your-ai-sidekick-might-be-a-spy.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}