That AI Extension Helping You Write Emails? It’s Reading Them First

Palo Alto Unit 42 published multiple research posts covering high-risk threats across browsers, cloud, supply chains, and infrastructure. Key findings include malicious GenAI browser extensions that intercept prompts, harvest data and credentials, and exfiltrate sensitive information; an evolving npm supply-chain threat landscape with wormable malware, CI/CD persistence, and multi-stage attacks; targeted actor activity (TGR-STA-1030) in Central and South America; frontier AI enabling faster vulnerability discovery and autonomous multi-agent cloud attacks; critical Amazon Bedrock AgentCore bugs