I-AI Sidebar Spoofing I-attack isebenzisa izifundo ze-browser ezijulile ukuze zibonise i-AI sidebar interfaces ezijulile, okuyinto isetshenziselwa ukuhlangabezana abasebenzisi ukuhlangabezana izivakashi ezinzima ezivela ekutholeni i-credential, i-device hijacking, ne-password exfiltration. Palo Alto, California, October 23rd, 2025/CyberNewsWire/-- Ukuhlobisa Ukuhlobisa Ukuhlola kubonisa kanjani ama-attackers angakwazi ukuchithwa kwama-AI browser sidebars - isixhumanisi esiyinhloko lapho abasebenzisi zihlanganisa ne-AI browsers efana ne-Comet, kanye ne-consumer browsers nge-AI features efana ne-Brave ne-Edge. Ngokwenza i-pixel-perfect replicas ye-AI sidebars ezivamile, ama-extensions ezinzima imibuzo eyenziwe yi-AI ebandakanya izicelo ezinzima ezivela abasebenzisi abacindezela. "I-AI yakhelwe isixhobo esiyingqayizivele kubasebenzisi ezingu-millions ukufundisa izinzuzo ezintsha kanye nezinqubo ezisebenzayo. Ngokungafani, lokhu kwenza isakhiwo esizayo lapho abantu zihlole ngokugqithisile izicelo ezisebenzayo ze-AI ngaphandle kokufundisa izinzuzo zokhuseleko, "bheka Vivek Ramachandran, Umongameli no-CEO we-SquareX. "Ngaphandle kokuphindaphindiwe kwe-visual noma inqubo yokusebenza, i-AI Sidebar Spoofing isishintshwa isithombe esithathwa kubasebenzisi kumakhasimende se-AI, ukuhlangabezana ukuhlangabezana nezinsizakalo ezisebenzayo okuyinto akufanele ngokugqithisile noma akufanele." "I-AI iye yakhelwe isixhobo esiyingqayizivele kubasebenzisi ezingu-millions ukufundisa izinzuzo ezintsha kanye nezinqubo ezisebenzayo. Ngokungafani, lokhu iye yakhelwe isitimela emibi lapho abantu zihlole ngokugqithisile imiyalezo eyenziwe yi-AI ngaphandle kokufundisa izinzuzo zokhuseleko," ibonisa. Umbhali no-CEO we-SquareX. "Ngaphandle kokubili noma ukuhlangabezana kwe-workflow, i-AI Sidebar Spoofing I-attack ibhizinisi lithunyelwe kumakhasimende ebonakalayo ku-AI interfaces, okuvimbele ukuhlangabezana nezinsizakalo ezisebenzayo ezingenakuthanda ngokuphelele noma ezaziwayo." Ukubuyekeza Ukubuyekeza I-SquareX ibonise i-AI Sidebar Spoofing ama-attacks nge-three main case studies, kodwa ibonise ukuthi singathanda ukuthi ama-variants ezininzi ze-attack zihlanganisa. Enye isibonelo, umsebenzisi uthatha i-AI sidebar indlela yokuthintela i-cryptocurrency kusuka ku-akhawunti yabo. I-AI Sidebar ebonakalayo ibonise ukuthi ibhizinisi ebonakalayo kodwa ibonise i-Binance login page URL nge-phishing link. Ngokufunda ukuthi ama-instructions eyenziwe ngu-Comet, umsebenzisi ibonise izitifiketi zabo ku-phishing site, okuyinto umsebenzisi isetshenziselwa ukufinyelela ku-akhawunti yama-victim ukuze ufike i-cryptocurrency yabo. Ezi ezinye izibonelo, abas Izifundo zibonise futhi ukuthi ezinye i-AI browsers kanye ne-consumer browsers eyenza i-AI sidebar ezifana ne-Edge, i-Firefox ne-Safari zihlanganisa ngokulinganayo ku-AI Sidebar Spoofing Attack. Lokhu kubalulekile ukuthi ngisho nangokufaka ukusetshenziswa kwe-AI browsers, abasebenzisi zihlanganisa lezi zangaphakathi njengoko kungenziwa ku-browser ye-AI sidebar. Ngokuvamile, izivakashi zihlanganisa kuphela izindwendwe zokusebenza eziyisisekelo ze-browser, ezivamile zihlanganisa ezivakashi ezivakashi ezivakashi ezifana ne-Grammarly ne-password managers, okwenza ukuthi zihlanganisa ngokuvamile ngokucacisa ukucaciswa kwezindwendwe. Ngokuvamile, inguqulo se-AI Sidebar Spoofing ingabangela ukujabulela, ukunikela imibuzo esiyingqayizivele, kuze kube kungase bakwazi ukujabulela abasebenzisi ukwenza izinto ezisebenzayo ngokuvumelana nezidingo zabo. Ngakho-ke, kubalulekile kakhulu ukuthi amazwe zihlanganisa ngokuvakashiwa kwe-extension emzimbeni ngexesha, kanye ne-granular browser-native guardrails ukuhlangabezana nezinsizakalo abasebenzisi Ukuze uthole ulwazi oluthile, abasebenzisi angakwazi ukuqondisa . inguqulelo inguqulelo mayelana SquareX I-browser extension yenza zonke izibuyekezo ezivela kumadivayisi ye-Enterprise-grade browser, kuhlanganise ne-AI Browsers. Isisombululo se-Browser Detection and Response (BDR) ye-SquareX esiyingeni esidumile ibhizinisi inikeza izinhlangano ezivela ku-browser-native kuhlanganise ama-inthanethi ze-inthaneti ze-inthaneti, ama-Last Mile Reassembly Attacks, ama-extensions ezikhangayo kanye nama-identity attacks. Ngokungafani ne-browsers ze-Enterprise ezivamile, i-SquareX isixazulule ngokushesha ne-browsers ze-consumer ezivamile zokusebenza, ukunikeza ukhuseleko ngaphandle . Ukuhlobisa www.sqrx.com Ukuhlobisa www.sqrx.com Ngena ngemvume Umphathi we-PR U-Junice Liew Ukuhlobisa umbhali@sqrx.com
