Endpoint Security
Starting September 2026, new Chrome iterations will be released twice as fast, part of a two-week cycle.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Chrome"
Artificial Intelligence
Malicious extensions could hijack the Gemini Live in Chrome feature to spy on users and steal their files.
Data Protection
The internet giant is developing an evolution of the certificates based on Merkle Tree Certificates (MTCs).
Vulnerabilities
A Chrome 145 update fixes CVE-2026-2441, a vulnerability that can likely be exploited for arbitrary code execution.
Malware & Threats
With more than 37 million combined downloads, the extensions expose users to tracking and personal information theft.
Vulnerabilities
Three of the security defects are high-severity flaws, two of which were found and reported by Google.
Artificial Intelligence
Marketed as ChatGPT enhancement and productivity tools, the extensions allow the threat actor to access the victim's ChatGPT data.
Vulnerabilities
The two browser updates resolve 26 security defects, including bugs that could be exploited for code execution.
Malware & Threats
Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity.
Vulnerabilities
Apple has released macOS and iOS updates to patch two WebKit zero-days exploited in an “extremely sophisticated” attack.
Vulnerabilities
The Chrome zero-day does not have a CVE and it's unclear who reported it and which browser component it affects.
Artificial Intelligence
Chrome’s new agentic browsing protections include user alignment critic, expanded origin-isolation capabilities, and user confirmations.
Vulnerabilities
Chrome 143 stable was released with patches for 13 vulnerabilities, including a high-severity flaw in the V8 JavaScript engine.
Malware & Threats
The extensions were seen profiling users, reading cookie data to create unique identifiers, and executing payloads with browser API access.
Vulnerabilities
The flaw was reported by Google's Threat Analysis Group and was likely exploited by a commercial spyware vendor.
Vulnerabilities
Google and Mozilla have released fresh Chrome and Firefox updates that address multiple high-severity security defects.
Vulnerabilities
An out-of-bounds write flaw in WebGPU tracked as CVE-2025-12725 could be exploited for remote code execution.
Vulnerabilities
The two bugs are high-severity type confusion and inappropriate implementation issues in the browser’s V8 JavaScript engine.
Data Protection
Starting October 2026, the browser will ask users if they want to access public websites that do not use secure connections.
Vulnerabilities
The threat actor behind Operation ForumTroll used the same toolset typically employed in Dante spyware attacks.
Funding/M&A
Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.
Malware & Threats
Malware & Threats
Data Breaches
The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website.
Data Breaches
Cloud Security