Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Black Friday scammers offer fake gifts from big-name brands to empty bank accounts * Black Friday malvertising redirects users to 100+ fake "Survey Reward" pages impersonating major brands. * Scammers lure victims with free trending products, then demand personal and credit
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Introducing shopping research in ChatGPT * ChatGPT now includes a shopping research feature for efficient product comparison and discovery. * Powered by GPT-5 mini, it reads trusted sites, cites sources, and uses organic public retail data. * User chats are never shared with retailers,
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Google Chrome Patches Two Actively Exploited Zero-Day Vulnerabilities * Google released emergency security patches for two zero-day vulnerabilities, identified as CVE-2025-5678 and CVE-2025-5679, affecting its Chrome browser. * These critical flaws were confirmed to be under active exploitation in the wild, posing immediate
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 * A new threat campaign, dubbed "Matrix Push C2," is actively exploiting legitimate browser push notification services to launch fileless, cross-platform phishing attacks. * The attack chain involves tricking users into subscribing to malicious push notifications, which then deliver deceptive alerts
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Announcing our Partnership with the United States Government * Perplexity partners with US government, offering enterprise AI platform to all federal agencies. * Federal agencies receive "Enterprise Pro for Government" at no cost for up to 18 months. * Platform received AI
Browser Security
Verifiable Privacy and Transparency: A new frontier for Brave AI privacy * Brave's Leo AI assistant integrates cryptographically verifiable privacy using NEAR AI Nvidia-backed TEEs. * Confidential computing runs user data and model execution within secure, hardware-isolated GPU enclaves. * Users can verify model integrity and prevent data tampering via open-source
Browser Security
Building more with GPT-5.1-Codex-Max * GPT-5.1-Codex-Max improves long-horizon coding and cybersecurity tasks, becoming OpenAI's most capable cybersecurity model. * Dedicated cybersecurity monitoring detects and disrupts malicious activity, despite not reaching "High capability." * Codex runs in a secure sandbox by default; OpenAI advises developers to review its
Browser Security
Coral: Bridging Parsing and Zero-Knowledge Proofs * Coral system enables zero-knowledge proofs that a byte stream matches a Context Free Grammar. * It prevents attacks using malformed inputs to generate misleading zero-knowledge proofs. * Coral supports practical grammars for verifying JSON API responses and source code parsing. Source: Brave | Date: November 17, 2025
Browser Security
Google Patches Actively Exploited Chrome Zero-Day Flaw (CVE-2025-13223) * Google has released an emergency security update for Chrome, addressing CVE-2025-13223, an actively exploited zero-day vulnerability. * The flaw is an integer overflow within the Mojo API, potentially leading to arbitrary code execution or sandbox escape, marking the eighth Chrome zero-day patched this
Browser Security
Tor Browser 15.0.1 Released with Critical Security Fixes * Tor Browser 15.0.1 was released to deliver crucial security updates, addressing several vulnerabilities, including critical flaws inherited from the upstream Firefox codebase. * The update resolves an arbitrary file deletion vulnerability (CVE-2025-20340) within Firefox's crash reporter component
Browser Security
Vivaldi 7.7: less friction, more control * Vivaldi 7.7 updates Chromium engine to 142.0.7444.167, incorporating upstream security patches. * Redesigned Privacy Dashboard offers clearer visibility of blocked trackers and per-site management. * New Performance settings introduce Memory Saver options for managing inactive tabs. Source: Vivaldi | Date: November 13,
Browser Security
How credentials get stolen in seconds, even with a script-kiddie-level phish * Simple phishing attacks steal credentials quickly via fake login pages attached as .shtml files. * Malicious .shtml pages leverage JavaScript to instantly transmit stolen credentials via a Telegram bot. * Attackers bypass phishing servers using Telegram, making detection harder; use security