logo

LinkedIn Hidden Code Secretly Searches Your Browser for Installed Extensions

ID: 29ae89b1-5ff6-5e3e-ad4b-ed7c2d5c2380

STIX ID: report--29ae89b1-5ff6-5e3e-ad4b-ed7c2d5c2380

Feed Name: cybersecurityNews.com

Threat Score
85/100

Date Published: 2026-04-04

Date Updated: 2026-04-21

Author: Guru Baran

...
...

LinkedIn is reported to run hidden JavaScript on Chromium-based browsers that probes for over 6,000 browser extensions, links extension presence to real LinkedIn identities and employers, encrypts the results, and transmits them to LinkedIn and third parties (including HUMAN Security and Google). Researchers claim the scans collect sensitive, special-category inferences (religion, political views, health/disability), affect a massive user base, and may violate GDPR, ePrivacy Directive and DMA; suggested mitigations include using Firefox/Safari, a clean Chrome profile, or browsers with fingerprinting protections.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.