Now ChatGPT Chrome Extension Can See and Analyze the Content in Open Tabs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com


OpenAI has expanded its ChatGPT Chrome extension so the assistant can read information across open tabs and carry out browser tasks.

The update moves ChatGPT beyond answering questions about a single page, adding tools for comparing content, filling forms, sending messages, and organizing tabs.

The announcement appeared on October 16 in India. OpenAI says the extension is available across all ChatGPT plans, bringing browser access to users without requiring a separate paid tier for the extension itself.

ChatGPT’s Chrome extension adds Chat and Work modes, letting users analyze open tabs, gather information, control tabs, download files, and group pages.

OpenAI’s examples include comparing three couches by size, material, delivery time, and return policy. Users can also ask for a plain language explanation of an article or compare pricing pages. These tasks reduce the need to copy information between websites and a chat window.

ChatGPT Chrome Extension Analyzes Open Tabs

The extension also brings ChatGPT into a browser tab, with access to conversation history while users browse alongside it. According to the Chrome Web Store listing, it connects browser tasks with ChatGPT on desktop and the web, including connected local files where available.

OpenAI says tasks can run in the background without taking over the active browsing session. Supported uses include research on signed-in websites, document editing, spreadsheet work, data entry, website testing, and bulk file downloads. The listing also names compatibility with Microsoft Edge, Brave, and Opera.

The main security issue is access. An assistant working inside signed-in websites may encounter private messages, business records, or other sensitive material. That makes the scope of each task important, particularly when browser activity involves company accounts or customer information.

The store’s privacy disclosure lists website content, browsing history, user activity, personal communications, authentication information, health information, and financial information among the data categories handled. These disclosures describe data handling categories, not proof that every category is collected during every task.

OpenAI states that ChatGPT will request permission before referencing browsing history or uploading and downloading files. However, the listing does not establish that every browser action receives a separate approval prompt.

Users should avoid treating those specific permission promises as a guarantee covering all activity. Reading web content also creates a route for prompt injection. This happens when a page contains instructions designed to steer an AI assistant away from the user’s request.

Cybersecurity News previously covered OpenAI’s work to strengthen ChatGPT Atlas against prompt injection. That coverage concerns Atlas, not a confirmed flaw in this Chrome extension.

Installation sources deserve equal attention. Earlier reporting on malicious Chrome extensions stealing ChatGPT conversations showed how fake AI tools can turn browser access into data theft. Users should follow OpenAI’s official download link and verify the publisher rather than trust a familiar name or logo alone.

For workplace use, keep requests narrow, limit signed-in access, and review confirmation prompts carefully. These controls help reduce exposure when an assistant can both read pages and act on their contents.

Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs.

The post Now ChatGPT Chrome Extension Can See and Analyze the Content in Open Tabs appeared first on Cyber Security News.