‘Featured’ Urban VPN caught stealing private AI chats | CSO Online

Security researchers discovered that Urban VPN Proxy, a popular free browser VPN extension, has been collecting and exporting full AI chat conversations from users’ browsers, even when VPN features are disabled. The extension, operated by Urban Cyber Security Inc. (affiliated with data broker BiScience), injects scripts to capture AI prompts and responses from platforms like ChatGPT and Claude, raising concerns about data exfiltration and enterprise security.