Tootfinder

My Open Graph Checker browser extension/add-on was updated to fix the Open Graph image preview so it now loads on pages behind HTTP Basic Auth.
Chrome: https://chromewebstore.google.com/detail/open-graph-checker/lkjaebkedoblfeglnhbgbjbdodjdogpe

📦 Three build modes from one codebase: a standalone native executable (bin), a loadable PHP extension (ext) or a shared library with generated .stub.php (lib)
🌍 Targets Linux, macOS and Windows on x64 and ARM64, plus #WebAssembly via WASI 0.2 and browser output

Anthropic gives Claude Cowork its own built-in browser on the desktop app separate from users' day-to-day browser, rolling out to paying subscribers (Frederic Lardinois/The New Stack)
https://thenewstack.io/claude-built-in-browser-cowork/

Anthropic's Claude now has a browser of its own
Anthropic added a built-in browser to Claude's Cowork desktop app, ending the need for the Chrome extension for many web tasks.

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed delivering a browser wallet and credential stealer.
🧑‍💻 https://

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the data via Telegram.

@… I don't suppose there's a browser extension out there that automatically flags any page that comes from one of these BS sites?

Don't leave for the weekend before you check out today's Metacurity for a concise rundown of the most critical infosec developments you should know, including
--AI shifts from cyber assistant to attack operator, Anthropic finds,
--Senate probes OpenAI over Hugging Face breach,
--EU gains access to Anthropic’s Mythos 5,
--Japan breach may expose data on 246k people,
--Conti developer gets four years in prison,
--IDScan confirms theft of 150m driver’s licenses,
--Surfshark test server exposed in configuration blunder,
--AI agents help breach 395 organizations worldwide,
--Trezor phishing campaign targets 347k customers,
--Ransomware developer gets nearly 13 years in prison,
--Korea raises breach fines to 10% of revenue,
--AI-assisted invoice scam sends 1m emails,
--White House plans to expand water cyber pilot,
--LinkedIn defeats browser-extension privacy lawsuits,
--Cybersecurity failures drove the Hugging Face incident,
--Anthropic’s Mythos 5 defeats CAPTCHAs
https://www.metacurity.com/ai-shifts-from-cyber-assistant-to-attack-operator-anthropic-finds/

Trying out Claude Code CLI for the first time in awhile. It's got decent sandboxing now but the first thing the agent asked me was to install a Chrome extension so it could use my browser. LOLOLO.