Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT * Researchers have confirmed the JS#SMUGGLER threat actor group is actively leveraging compromised websites to deploy the NetSupport RAT malware. * The attack chain involves injecting malicious JavaScript into legitimate websites,
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Google Chrome 143 Bolsters Privacy and WebAssembly Security * Chrome 143 introduces significant enhancements, including advanced privacy controls, an improved sandbox architecture, and a new WebAssembly security model designed to mitigate memory-related vulnerabilities. * The update focuses on strengthening user data protection through
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Microsoft Edge Introduces Enhanced Enterprise New Tab Page Experience * Microsoft Edge will roll out an improved Enterprise New Tab Page experience, allowing IT administrators to customize layout and content for managed users. * This feature aims to boost employee productivity by providing
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Cyberattackers are running and EtherHiding * EtherHiding tactic embeds malware components within blockchain smart contracts, evading detection. * Attackers leverage decentralized blockchain and ethers JavaScript library for watering hole attacks. * Defenders must block unnecessary blockchain endpoints and increase user awareness of Web3 risks.
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 AI in 2025 was defined by increased accessibility, security, and agents * Increased AI agent autonomy in 2025 sparked security concerns, urging caution against AI self-governance. * AI's increased accessibility acted as a "force multiplier" for both cyberattacks and
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Announcing the new Skills feature in Leo, Brave's in-browser AI assistant * Brave launched "Skills" for its Leo AI assistant on desktop and Android version 1.85+. * New "Skills" feature allows users to automate frequent tasks
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 ‘HashJack’ demo hides malicious instructions in URL * Cato Networks revealed "HashJack," a vulnerability embedding malicious instructions within URL hashtags. * Exploit targets AI-powered browsers, injecting prompts for large language models to unwittingly execute commands. * This attack bypasses network security; Google&
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 New AI Browsers Introduce Significant Security Challenges for Organizations * The emergence of new AI-powered browsers introduces significant security challenges, including novel attack vectors and data leakage risks due to their "agentic" capabilities. * These AI browsers, designed to perform tasks
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Raccoon Stealer v2 Expands to Target Firefox Browser Profiles * Raccoon Stealer v2, an information-stealing malware, has updated its capabilities to specifically target user profiles within the Firefox web browser. * This expansion allows the stealer to exfiltrate sensitive data, including cookies, login
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Hackers Register 18,000 Holiday-Themed Domains for Cyberattacks * Researchers identified over 18,000 newly registered domains using holiday-related keywords like "Christmas," "Black Friday," and "Flash Sale," designed for phishing, malware distribution, and brand impersonation. * These
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Xillen Stealer With New Advanced Features Evade AI Detection and Steal Sensitive Data from Password Managers * Xillen Stealer versions 4 and 5 use advanced features to evade AI-driven security solutions. * Malware targets sensitive data from password managers, browser-stored info, and cryptocurrency