Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Announcing our Partnership with the United States Government * Perplexity partners with US government, offering enterprise AI platform to all federal agencies. * Federal agencies receive "Enterprise Pro for Government" at no cost for up to 18 months. * Platform received AI
Browser Security
Verifiable Privacy and Transparency: A new frontier for Brave AI privacy * Brave's Leo AI assistant integrates cryptographically verifiable privacy using NEAR AI Nvidia-backed TEEs. * Confidential computing runs user data and model execution within secure, hardware-isolated GPU enclaves. * Users can verify model integrity and prevent data tampering via open-source
Browser Security
Building more with GPT-5.1-Codex-Max * GPT-5.1-Codex-Max improves long-horizon coding and cybersecurity tasks, becoming OpenAI's most capable cybersecurity model. * Dedicated cybersecurity monitoring detects and disrupts malicious activity, despite not reaching "High capability." * Codex runs in a secure sandbox by default; OpenAI advises developers to review its
Browser Security
Coral: Bridging Parsing and Zero-Knowledge Proofs * Coral system enables zero-knowledge proofs that a byte stream matches a Context Free Grammar. * It prevents attacks using malformed inputs to generate misleading zero-knowledge proofs. * Coral supports practical grammars for verifying JSON API responses and source code parsing. Source: Brave | Date: November 17, 2025
Browser Security
Google Patches Actively Exploited Chrome Zero-Day Flaw (CVE-2025-13223) * Google has released an emergency security update for Chrome, addressing CVE-2025-13223, an actively exploited zero-day vulnerability. * The flaw is an integer overflow within the Mojo API, potentially leading to arbitrary code execution or sandbox escape, marking the eighth Chrome zero-day patched this
Browser Security
Tor Browser 15.0.1 Released with Critical Security Fixes * Tor Browser 15.0.1 was released to deliver crucial security updates, addressing several vulnerabilities, including critical flaws inherited from the upstream Firefox codebase. * The update resolves an arbitrary file deletion vulnerability (CVE-2025-20340) within Firefox's crash reporter component
Browser Security
Vivaldi 7.7: less friction, more control * Vivaldi 7.7 updates Chromium engine to 142.0.7444.167, incorporating upstream security patches. * Redesigned Privacy Dashboard offers clearer visibility of blocked trackers and per-site management. * New Performance settings introduce Memory Saver options for managing inactive tabs. Source: Vivaldi | Date: November 13,
Browser Security
How credentials get stolen in seconds, even with a script-kiddie-level phish * Simple phishing attacks steal credentials quickly via fake login pages attached as .shtml files. * Malicious .shtml pages leverage JavaScript to instantly transmit stolen credentials via a Telegram bot. * Attackers bypass phishing servers using Telegram, making detection harder; use security
Browser Security
“A.I.” browsers: the price of admission is too high * AI browsers collect extensive user data, including sensitive AI prompt content, often by default for training models. * They create "walled gardens," increasing user risk of misinformation, manipulation, and disinformation campaigns. * Agentic AI browsers are vulnerable to prompt injection
Browser Security
The New Comet Assistant * Comet Assistant receives a major update, enhancing web perception and multi-tab workflow capabilities * New version explicitly asks for user permission before browser interaction to ensure control * Prioritizes user privacy and agency, reducing unauthorized actions and data exposure risks Source: Perplexity AI Hub | Date: November 06, 2025
Browser Security
A critical new denial-of-service (DoS) vulnerability, dubbed the "Brash" exploit, has been discovered, capable of instantly crashing Chromium-based browsers across various platforms. The vulnerability affects over 3 billion users worldwide and remains currently unpatched, with Google only stating they are "looking into the issue" after the
Browser Security
Amidst these evolving threats, Microsoft Edge for Business is rolling out enhanced data loss prevention (DLP) controls designed to secure interactions with unmanaged Generative AI applications. Microsoft Edge for Business Enhances GenAI Data Protection Overview In a proactive move to address data security concerns surrounding Generative AI (GenAI) applications, Microsoft