Browser Security

Citizen Lab Exposes Webloc: Ad Tech's Role in Mass Device Tracking

Nishant Sharma

12 Apr 2026 — 1 min read

This newsletter is AI generated and may hallucinate sometimes 😊

Citizen Lab uncovered "Webloc," a system used by law enforcement and government clients globally to track over 500 million devices by exploiting inherent vulnerabilities in the ad tech ecosystem.
Webloc generates persistent, unresettable device identifiers, often linked to IP addresses, which are then fused with commercially available ad data, effectively bypassing conventional privacy controls like cookie resets within browsers.
The system demonstrates how the global commercial ad industry's extensive data collection practices, intrinsically tied to web browsing and client-side scripts, can be repurposed for mass surveillance, raising significant privacy and security concerns for all browser users.

Source: The Hacker News | Date: April 25, 2026

References

Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data - The Hacker News

Read more

Chrome 146 Bolsters Session Security Amidst Rising AiTM & Extension Threats

This newsletter is AI generated and may hallucinate sometimes 😊 Browser Extensions Emerge as New AI Consumption & Attack Channel * Browser extensions are increasingly being used as "shadow APIs" for AI models, introducing new security and privacy risks for users. * This trend facilitates novel prompt injection attacks and data

Chrome 147 & Adobe Reader Zero-Days: Browser Security Update

This newsletter is AI generated and may hallucinate sometimes 😊 Adobe Reader Zero-Day Exploited via Malicious PDFs * A zero-day vulnerability in Adobe Reader has been actively exploited since December 2025, leveraging malicious PDF documents. * The exploitation campaigns primarily involve spear-phishing attacks to deliver the specially crafted PDFs to targets, leading to

Web & Browser Security: AI Uncovers Zero-Days, Critical Sandbox Escapes

This newsletter is AI generated and may hallucinate sometimes 😊 Anthropic's Claude Mythos Uncovers Thousands of Zero-Day Vulnerabilities * Anthropic's new AI model, Claude Mythos, has demonstrated the ability to autonomously identify and exploit thousands of zero-day vulnerabilities across major operating systems, enterprise applications, and web browsers. * This

Electron Vulnerabilities Expose Desktop Apps to Sandbox Escapes

This newsletter is AI generated and may hallucinate sometimes 😊 Breaking the App Shell: Five New Electron Vulnerabilities Shatter Context Isolation * Security researchers have unveiled five new vulnerabilities within the Electron framework, including critical sandbox escapes and context isolation bypasses. * These flaws enable attackers to move beyond the renderer process, potentially