Malware & Threats
With more than 37 million combined downloads, the extensions expose users to tracking and personal information theft.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Chrome"
Vulnerabilities
Three of the security defects are high-severity flaws, two of which were found and reported by Google.
Artificial Intelligence
Marketed as ChatGPT enhancement and productivity tools, the extensions allow the threat actor to access the victim's ChatGPT data.
Vulnerabilities
The two browser updates resolve 26 security defects, including bugs that could be exploited for code execution.
Malware & Threats
Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity.
Vulnerabilities
Apple has released macOS and iOS updates to patch two WebKit zero-days exploited in an “extremely sophisticated” attack.
Vulnerabilities
The Chrome zero-day does not have a CVE and it's unclear who reported it and which browser component it affects.
Artificial Intelligence
Chrome’s new agentic browsing protections include user alignment critic, expanded origin-isolation capabilities, and user confirmations.
Vulnerabilities
Chrome 143 stable was released with patches for 13 vulnerabilities, including a high-severity flaw in the V8 JavaScript engine.
Malware & Threats
The extensions were seen profiling users, reading cookie data to create unique identifiers, and executing payloads with browser API access.
Vulnerabilities
The flaw was reported by Google's Threat Analysis Group and was likely exploited by a commercial spyware vendor.
Vulnerabilities
Google and Mozilla have released fresh Chrome and Firefox updates that address multiple high-severity security defects.
Vulnerabilities
An out-of-bounds write flaw in WebGPU tracked as CVE-2025-12725 could be exploited for remote code execution.
Vulnerabilities
The two bugs are high-severity type confusion and inappropriate implementation issues in the browser’s V8 JavaScript engine.
Data Protection
Starting October 2026, the browser will ask users if they want to access public websites that do not use secure connections.
Vulnerabilities
The threat actor behind Operation ForumTroll used the same toolset typically employed in Dante spyware attacks.
Vulnerabilities
High-severity flaws were patched in Chrome’s WebGPU and Video components, and in Firefox’s Graphics and JavaScript Engine components.
Vulnerabilities
An exploited type confusion in the V8 JavaScript engine tracked as CVE-2025-10585 was found by Google Threat Analysis Group this week.
Vulnerabilities
Google patched a critical use-after-free vulnerability in Chrome that could potentially lead to code execution.
Vulnerabilities
Chrome's latest release addresses a high-severity use-after-free vulnerability in the V8 JavaScript engine that could be exploited for remote code execution.
Vulnerabilities
CISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remote code execution.
Data Breaches
Vulnerabilities
Hacker Conversations
Artificial Intelligence
Funding/M&A
WideField will accelerate Agentic SOC capabilities by expanding the lens on threat investigation to include identity, credentials, sessions, and blast radius.
Malware & Threats
Vulnerabilities
Vulnerabilities
Cybersecurity Funding
