
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
workgraph
WorkGraph AI — Automatically tracks your browser activity and forwards it to the WorkGraph desktop agent for AI-powered productivity insights. All data stays local via native messaging.
WorkGraph automatically tracks your browsing activity and feeds it to the WorkGraph desktop agent, giving you AI-powered productivity insights without any manual logging.
HOW IT WORKS • WorkGraph runs silently in the background as you browse. • Tab changes, page visits, and navigation events are captured locally. • All data is forwarded to the WorkGraph desktop agent over a local native messaging channel — nothing leaves your machine. • The desktop agent turns raw browser activity into structured work sessions and insights.
PERMISSIONS EXPLAINED • tabs / activeTab — needed to read the URL and title of the active tab. • webNavigation — detects page loads and single-page app (SPA) navigations. • history — captures browsing history events (can be disabled in Settings). • storage — persists your settings and an offline queue of unsent events. • nativeMessaging — communicates with the WorkGraph desktop agent installed on your machine. This extension does nothing without the companion app. • idle — detects when you step away to correctly end a work session. • alarms — keeps the background service worker alive between events. • host_permissions (<all_urls>) — required to inject the content script that reads page headings and metadata on every site.
PRIVACY • No data is sent to any remote server. Everything goes through the local native messaging channel to the desktop agent running on your machine. • Incognito / private browsing tabs are always skipped. • Sensitive URL paths (/login, /account, /payment, /checkout, etc.) are automatically dropped. • You can pause tracking at any time via the extension popup. • You can exclude specific domains in the Settings page.
REQUIREMENTS • WorkGraph Desktop Agent must be installed and running on your machine (macOS or Windows). The extension shows "Disconnected" without it. • Firefox 128 or later.
FAQs
WorkGraph AI — Automatically tracks your browser activity and forwards it to the WorkGraph desktop agent for AI-powered productivity insights. All data stays local via native messaging.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.