Browser Security Digest: Claude XSS, WebRTC Skimmer & Apple WebKit Fixes

Apple Releases Security Updates for Safari, WebKit, and OS Flaws

• Apple addressed multiple vulnerabilities across its product line, including critical security updates for Safari (CVE-2026-1793, CVE-2026-1794) and WebKit (CVE-2026-1804).
• The patches mitigate various issues that could lead to arbitrary code execution, denial of service, or information disclosure across iOS, iPadOS, macOS, tvOS, and watchOS.
• Users are strongly advised to update their devices to the latest available versions to protect against these vulnerabilities, which could potentially be chained for complex attacks.

Source: The Cyberthrone | Date: March 26, 2026

References

1. Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website - The Hacker News
2. WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites - The Hacker News
3. Apple Patches numerous vulnerabilities across its products - The Cyberthrone
4. Researchers uncover WebRTC skimmer bypassing traditional defenses - Security Affairs