Tag: google chrome
49 articles
Malicious Chrome Extensions Exfiltrate User Data
Malicious actors have hijacked 108 Google Chrome extensions, quietly harvesting user data and turning every webpage into a playground for ad injection and code execution - putting around 20,000 users at risk. This sneaky campaign, discovered by cybersecurity researchers, uses a single command-and-control system to wreak havoc on unsuspecting browsers.
Google Chrome Bolsters Defenses Against Infostealer Cookie Heists
Google Chrome just got a major security boost with its new Device Bound Session Credentials feature, designed to prevent infostealers from swiping your session cookies and letting hackers impersonate you without a password. This update is a game-changer in the fight against cookie heists and stolen login credentials.
Google Deploys DBSC in Chrome to Thwart Windows Session Hijacking
Google just flipped the switch on Device Bound Session Credentials (DBSC) for Chrome users on Windows, giving millions a major security boost against session hijacking - but what does it mean for you? This game-changing update ties your credentials to your device, making it much harder for hackers to get hold of your online sessions.
Google Chrome Bolsters Defenses Against Session Cookie Theft
Google Chrome just got a major security boost with the introduction of Device Bound Session Credentials (DBSC) protection, designed to block info-stealing malware from harvesting session cookies and putting your online credentials at risk. This move is a key step in the ongoing cat-and-mouse game between defenders and cyber threats.
Google Chrome Zero-Day Flaw CVE-2026-5281 Under Active Exploitation
Google just patched a zero-day vulnerability in Chrome (CVE-2026-5281) that's already being exploited in the wild, so it's crucial to update your browser ASAP to avoid potential risks. This urgent patch is a stark reminder that even secure software can become a target overnight.
Google Patches Fourth Chrome Zero-Day Exploited in 2026 Attacks
Google just patched the fourth Chrome zero-day vulnerability of 2026, a sobering reminder that attackers are relentlessly targeting the browser ecosystem with increasingly sophisticated threats. This latest emergency fix highlights the urgent need for users to stay vigilant and up-to-date with the latest security patches.
Chrome updates: Exclusive rapid fixes for safer browsing
Chrome updates just went into overdrive — Google will push security fixes every two weeks across desktop, Android and iOS to shrink the window attackers have to weaponize bugs. Enterprises can still opt into an eight‑week Extended Stable channel for predictable testing and rollouts.
Chrome Gemini panel Exclusive: Dangerous Extension Risk
If convenience opens a door, who will walk through it? A high‑severity bug let malicious extensions hijack Chrome’s Gemini Live panel and inherit dangerous privileges — now patched, but a clear warning that AI features are reshaping the browser threat model.
Google Exclusive Fix for Critical Chrome V8 Zero-Day
Google just pushed an emergency Chrome update to fix a critical, actively exploited V8 JavaScript type‑confusion zero‑day (CVE‑2025‑13223, CVSS 8.8); update your browser—or call IT—now, because a single malicious page can lead to full host compromise.
Chromium Critical Flaw: Exclusive Unpatched Alert
An unpatched Chromium flaw in the Blink rendering engine can crash browsers — and even freeze whole machines — in seconds, creating a real operational and security risk. If you manage desktops, kiosks or enterprise systems, this is one bug you need to take seriously now.
Chrome Zero-Day Exclusive: Dangerous Mem3nt0 mori Attacks
A fresh Chrome zero-day is powering dangerous Mem3nt0 mori attacks. Learn how they work and what quick steps you can take to stay safe.
WhatsApp Web automation: Risky Must-Have Threat
What looked like handy WhatsApp Web productivity add-ons were actually 131 cloned Chrome extensions hijacked to blast spam across Brazil, reaching about 20,900 users before takedown. Socket’s investigation is a wake-up call—check extension reputations, limit permissions, and treat browser add-ons with the same caution you’d give any app that touches your messages.
Cybersecurity vulnerabilities: Must-Have Best Practices
This week’s roundup uncovers alarming flaws—from a critical SharePoint bug that can expose entire orgs to a Chrome exploit that makes ordinary browsing risky—showing attackers now target overlooked misconfigurations as much as flashy zero-days. Stay ahead by prioritizing patching, hardening defaults, and boosting monitoring to keep your data safe.
Urgent Google Chrome Update Fixes Active CVE-2025-6558 Exploit
Google just rolled out a critical Chrome update to fix a high-severity flaw that’s already being exploited—if you use Chrome, don’t wait to secure your browser now!
Widespread Browser Hijacking Affects 2.3 Million Chrome and Edge Users
Widespread browser hijacking impacts 2.3 million Chrome and Edge users, compromising security and altering user settings. Protect your browsing now!
Weekly Security Roundup: Chrome Vulnerabilities, Ivanti Exploits, MacOS Threats, Crypto Crimes, and More
Stay informed with our Weekly Security Roundup covering Chrome vulnerabilities, Ivanti exploits, MacOS threats, crypto crimes, and more.
Red Team Campaign by OneClik Exploits Energy Sector with Microsoft ClickOnce and Golang Backdoors
Red Team Campaign by OneClik targets the energy sector using Microsoft ClickOnce and Golang backdoors to demonstrate security vulnerabilities.
Scrubbing Your Browser: How to Remove Ad Tech’s Traces
Learn how to effectively scrub your browser and eliminate traces of ad tech for a cleaner, more private browsing experience.
Microsoft Confirms Family Safety Prevents Google Chrome from Starting
Microsoft confirms that the Family Safety app can prevent Google Chrome from starting, impacting user access to the browser.
Weekly Security Update: Chrome Vulnerability, Massive DDoS Attack, MFA Bypass Techniques, Banking Trojan Insights, and More
Stay informed with our weekly security update covering Chrome vulnerabilities, DDoS attacks, MFA bypass techniques, banking trojans, and more.
Exploitation of Google Chrome Zero-Day CVE-2025-2783 by TaxOff to Install Trinper Backdoor
“Discover how TaxOff exploits Google Chrome Zero-Day CVE-2025-2783 to install the Trinper backdoor, compromising user security.”
Google Chrome to Reject Certificates from Two Authorities Over Compliance and Conduct Concerns
Google Chrome blocks certificates from two authorities over compliance and conduct issues, boosting browser security and trust.
EDDIESTEALER Variant Outmaneuvers Chrome’s Encryption to Access Browser Data
EDDIESTEALER variant bypasses Chrome encryption, accessing and exfiltrating sensitive browser data while posing significant security threats to users.
Google Chrome to block admin-level browser launches for better security
Google Chrome now blocks admin-level launches to boost security by preventing elevated access risks and ensuring safer browsing.