Maskr is a browser extension that detects and blocks personal data like Aadhaar numbers, bank details, API keys, and passwords before they're sent to AI chatbots. All processing happens locally on your device with no servers, accounts, or tracking, and users can choose to mask sensitive information or block it entirely.
Substack is obfuscating text by wrapping individual words and spaces in separate span tags to break Chrome's reading mode functionality, making articles unreadable when the feature is enabled.
Lisen is a free Chrome extension that reads web articles aloud using Cartesia voices without additional subscription costs. Users paste their Cartesia API key, select a voice, and can stream or pre-generate audio with word-level synchronization, while all data remains local to their device.
Transom is a native macOS application that manages multiple browser profiles by grouping windows into profile-oriented stacks with a glass tab strip overlay. It supports ten browsers including Chrome, Firefox, and Arc, and automatically routes web links to selected profiles based on customizable rules. The tool requires macOS 13+ on Apple silicon Macs and operates as a menu-bar accessory without a Dock icon.
Timewaster is a Chrome extension that automatically drafts detailed, time-consuming replies to cold sales emails by asking probing questions about the sender's claims. It uses Chrome's local Gemini Nano AI to generate responses without requiring accounts or cloud services, helping users reclaim inbox attention by turning the tables on sales outreach.
Jev Slop Filter is a Chrome extension that identifies and hides AI-generated posts on X and LinkedIn by scoring posts through TypeSafe API questions about writing patterns, with plans to expand to Reddit and YouTube. Users can customize detection thresholds, mark posts as AI or human to retrain weights, and maintain full privacy with API keys stored locally in the browser.
Security researcher Gal Weizman disclosed BragJack, an attack technique that hijacks AI browser assistants through malicious extensions. The proof-of-concept targeted five browsers including Google Chrome's Gemini Live, Microsoft Edge, Perplexity Comet, Opera Neon, and Anthropic's Claude, earning over $20,000 in bug bounties and producing two CVEs. The attacks exploit how AI assistants are integrated into browsers by manipulating web traffic through Chromium's declarativeNetRequest functionality to intercept requests and gain unauthorized access to sensitive data or control agent actions.
Digital Shield is a free Manifest V3 browser extension for Chrome and Firefox that suspends idle tabs to reduce RAM usage and improve performance, while also blocking trackers, malware, and phishing threats. It includes features like memory monitoring, breach checking, parental controls, and a password vault, with additional PRO features available.
OpenCloak is a browser extension that identifies and replaces personal information in AI prompts before sending them to ChatGPT, Claude, Gemini, and other AI services. The extension runs locally on your GPU using WebGPU, ensuring prompts never leave your device, and lets you review and approve substitutions before sending.
ManifestGo is an AI-powered Chrome extension builder that generates complete Manifest V3 projects from plain English descriptions, including popup, background service workers, content scripts, and options pages. It supports full-stack extensions with authentication, databases, and third-party integrations, and users retain full ownership of generated code for Chrome Web Store publication.
A Chrome extension that protects Gmail inboxes against phishing and spoofing by verifying sender addresses against a user-maintained allow-list, with features including sender badging, row filtering options, and optional client-side AES-GCM encryption. All processing occurs locally in the browser with zero remote servers or telemetry.
LeoTabs is a free, open-source tab and bookmark organizer for Chrome and Edge browsers that lets users save tabs as project collections, organize them into spaces, and restore work sessions. It supports importing bookmarks, searching tabs, exporting to formats like JSON and Markdown, and optional AI-powered organization via OpenAI, Anthropic, Google Gemini, or DeepSeek APIs.
Dassi is a Chrome automation tool that learns web tasks through natural language instructions or demonstrations, then executes them on a schedule within your existing browser and logged-in accounts. It uses AI models (Claude, ChatGPT, Gemini, etc.) to handle repetitive web tasks like reconciliation and filing, with optimizations like prompt caching and JavaScript libraries to reduce costs, while requiring user approval for critical decisions.
AnyFilter is a Chrome extension powered by Jev that hides unwanted content on websites, currently supporting X (Twitter), with plans for more sites. Users can configure hiding rules via natural language descriptions, and the extension allows reviewing and restoring hidden posts through a side panel.
Atlarix is a free Chrome extension that acts as a browser agent, working directly on pages you're logged into. It can read content, fill forms (with confirmation before submission), attach files, and create downloadable outputs, with conversations syncing across devices while page content stays local.
A browser extension and web-based tool that allows users to destroy or break the visual elements of any webpage for entertainment. Available across multiple browsers with both installable extensions and no-installation options.
Researchers introduce μSkia, a formal semantics for the Skia 2D graphics library mechanized in Lean, to optimize inefficient drawing operations. They identify suboptimal patterns in Google Chrome's code and develop an optimizer that achieves 18.7% speedup on real-world Skia programs while verifying correctness through translation validation.
Device Bound Session Credentials (DBSC) is an experimental web standard implemented in ASP.NET Core that ties session cookies to a device's private key, preventing cookie replay attacks. When a stolen cookie is copied to another machine, it becomes useless for session refresh since only the original device can sign the cryptographic challenge. This significantly reduces the attack window from weeks to minutes by forcing short-lived cookies that require device-based proof to refresh.
SlowMist disclosed KREMLIN, a Brazilian banking malware operation active since May 2025, which uses multi-stage loaders and malicious browser extensions to steal credentials and data. The malware bypasses Chromium security mechanisms and leverages Ethereum smart contracts as dead-drop resolvers for C2 infrastructure, with 1,515 infected hosts primarily in Brazil.
A blog owner explains why visitors may encounter anti-crawler blocking on their site, attributing it to old browser user agents used by high-volume crawlers gathering data for LLM training. The page addresses issues with feed aggregators like Inoreader and Feedly that fetch content with outdated user agents, and warns about archive services using suspicious crawling patterns.