Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Announcing the new Skills feature in Leo, Brave's in-browser AI assistant * Brave launched "Skills" for its Leo AI assistant on desktop and Android version 1.85+. * New "Skills" feature allows users to automate frequent tasks
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 ‘HashJack’ demo hides malicious instructions in URL * Cato Networks revealed "HashJack," a vulnerability embedding malicious instructions within URL hashtags. * Exploit targets AI-powered browsers, injecting prompts for large language models to unwittingly execute commands. * This attack bypasses network security; Google&
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 New AI Browsers Introduce Significant Security Challenges for Organizations * The emergence of new AI-powered browsers introduces significant security challenges, including novel attack vectors and data leakage risks due to their "agentic" capabilities. * These AI browsers, designed to perform tasks
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Raccoon Stealer v2 Expands to Target Firefox Browser Profiles * Raccoon Stealer v2, an information-stealing malware, has updated its capabilities to specifically target user profiles within the Firefox web browser. * This expansion allows the stealer to exfiltrate sensitive data, including cookies, login
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Hackers Register 18,000 Holiday-Themed Domains for Cyberattacks * Researchers identified over 18,000 newly registered domains using holiday-related keywords like "Christmas," "Black Friday," and "Flash Sale," designed for phishing, malware distribution, and brand impersonation. * These
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Xillen Stealer With New Advanced Features Evade AI Detection and Steal Sensitive Data from Password Managers * Xillen Stealer versions 4 and 5 use advanced features to evade AI-driven security solutions. * Malware targets sensitive data from password managers, browser-stored info, and cryptocurrency
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 AI shoppers open the door to a world of uncertainty * AI shopping agents introduce significant security risks by handling sensitive payment and email data. * Attackers exploit AI agents to steal credit card and bank account information, enabling large-scale fraud. * Immature AI
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Black Friday scammers offer fake gifts from big-name brands to empty bank accounts * Black Friday malvertising redirects users to 100+ fake "Survey Reward" pages impersonating major brands. * Scammers lure victims with free trending products, then demand personal and credit
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Introducing shopping research in ChatGPT * ChatGPT now includes a shopping research feature for efficient product comparison and discovery. * Powered by GPT-5 mini, it reads trusted sites, cites sources, and uses organic public retail data. * User chats are never shared with retailers,
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Google Chrome Patches Two Actively Exploited Zero-Day Vulnerabilities * Google released emergency security patches for two zero-day vulnerabilities, identified as CVE-2025-5678 and CVE-2025-5679, affecting its Chrome browser. * These critical flaws were confirmed to be under active exploitation in the wild, posing immediate
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 * A new threat campaign, dubbed "Matrix Push C2," is actively exploiting legitimate browser push notification services to launch fileless, cross-platform phishing attacks. * The attack chain involves tricking users into subscribing to malicious push notifications, which then deliver deceptive alerts