Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel * A vulnerability in Chrome's Gemini AI panel allows malicious extensions to bypass security policies, leading to privilege escalation and unauthorized actions. * This flaw could enable attackers, via compromised
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Microsoft Edge Introduces Auto-Open Copilot Side Pane for Outlook Links * Microsoft Edge is rolling out a new feature that automatically opens the Copilot side pane when users click on links from Outlook. * This enhancement is designed to provide users with immediate
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 * Google has released an emergency security update for its Chrome browser, addressing a critical zero-day vulnerability identified as CVE-2025-4552. * The vulnerability is categorized as a type confusion bug within the V8 JavaScript engine and is confirmed by Google to be under
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 ‘Starkiller’ Phishing Service Proxies Real Login Pages and MFA * Starkiller is a new phishing-as-a-service (PhaaS) platform that leverages sophisticated reverse proxy technology to intercept login credentials and bypass multi-factor authentication (MFA). * Operating since early 2026, the service targets high-value corporate accounts
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 * Google has released an urgent security update for Chrome, addressing several high-severity vulnerabilities, including flaws in the PDFium library and the V8 JavaScript engine. * These critical vulnerabilities could lead to remote code execution or arbitrary code execution, enabling attackers to take
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 * Google has issued an urgent security update for Chrome to mitigate CVE-2026-2441, a critical type confusion vulnerability in the V8 JavaScript engine that is currently under active exploitation in the wild. * The flaw affects Chrome desktop versions prior to 122.0.
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Fake AI Chrome extensions with 300K users steal credentials, emails * 30 malicious Chrome extensions, posing as AI assistants, tricked over 300,000 users. * A "Gemini AI Sidebar" extension alone infected 80,000 users via the Chrome Web Store. * Extensions
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Brave launches most powerful search API for AI to date * Brave launched a new Search API featuring Zero Data Retention (ZDR) and SOC 2 Type II compliance. * The API operates an independent global search index, offering direct control over data sources.
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Adblock Filters Exposes Reveal User Location Despite VPN Protection * New fingerprinting bypasses VPNs, exposing user location via AdBlock filter lists. * Malicious websites exploit country-specific AdBlock filter lists to pinpoint user location. * Browser configurations leveraged by malicious sites bypass VPNs by probing
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Foxit Releases Security Updates for PDF Editor Cloud XSS Vulnerabilities * Foxit released security updates for its PDF Editor Cloud, addressing multiple Cross-Site Scripting (XSS) vulnerabilities. * These XSS flaws could allow attackers to inject malicious scripts into web pages viewed by users,
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Google Chrome Integrates Gemini AI for Enhanced Browsing and Smart Features * Google is integrating its Gemini AI model directly into the Chrome browser, aiming to enhance user experience with features like tab organization, content summarization, and query suggestions. * The integration leverages
Browser Security
This newsletter is AI generated and may hallucinate sometimes 😊 Chrome Patches Actively Exploited Zero-Day CVE-2025-6038 * Google released an emergency security update for Chrome, version 119.0.6045.199/.200 for desktop, addressing a critical zero-day vulnerability tracked as CVE-2025-6038. * The vulnerability is a type confusion bug within the V8 JavaScript