Fake Firefox Wallets Target Recovery Phrases
Sixteen malicious Firefox extensions cloned Rabby and OKX wallet interfaces to intercept recovery phrases and private keys, researchers say.
30 results for “browser”
Sixteen malicious Firefox extensions cloned Rabby and OKX wallet interfaces to intercept recovery phrases and private keys, researchers say.
Google's latest stable release patches a wide swath of memory-safety bugs, but most bug bounty payouts remain undecided.
Elastic Security Labs details a Brazilian banking malware toolkit that abuses browser extension installs and Ethereum smart contracts to steal credentials and sessions.
A cross-store Twitch extension sent OAuth tokens for roughly 31,000 users to operator proxies, Socket reports.
A one-click flaw in Sogou Input Method allowed UNC3569 to deploy GrayRabbit malware, but the underlying Chromium engine remains outdated and unsandboxed.
A new exploit kit chains four Chrome and Windows flaws, revealing how quickly attackers weaponize the delay between open-source fixes and stable browser patches.
Huntress reports a phishing campaign using browser-in-the-browser tricks to slip rogue ScreenConnect clients past victims.
Proofpoint says an exploit kit chaining two Chromium flaws and a Windows bug hit four suspected China-linked espionage groups within days.
Fortinet patches two critical flaws: one bypassing FortiMonitorOnSight auth via JWT, another allowing browser traffic proxy.
Google moves Chrome to a two-week release cycle to speed security patches and feature delivery.
A complex JavaScript-based malware that can replay stolen browser sessions to breach Google accounts keeps evolving, researchers warn.
Google patches a high-severity type confusion bug in V8 that has been exploited in the wild, the sixth zero-day fixed this year.
Attackers buy legitimate Chrome, Edge extensions and push malware via updates, Socket reports.
A single website visit can hijack NemoClaw's local Ollama model server via DNS rebinding, according to new research.
Researcher discovers AliExpress using obsolete WebAudio fingerprinting; Firefox fix likely neutralizes it.
Researchers found 40 malicious Firefox extensions impersonating Web3 products to steal wallet secrets.
Researchers say a suspected China-nexus APT used a VMware flaw to deploy ransomware as a smoke screen.
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
Researchers have uncovered a new macOS infostealer that uses ClickFix social engineering and has stealthy remote browser control capabilities.
Google has issued a new browser update addressing 41 critical and high-severity vulnerabilities across multiple platforms.
The shift toward browser-based workflows and AI tools is revealing significant vulnerabilities in traditional network security.
An appellate court has affirmed that the creation of a web browser does not constitute a violation of the CFAA.
Ajit Varma, Head of Firefox at Mozilla, discusses the browser's role in a future dominated by AI and closed ecosystems.
Google's upcoming update aims to stop malware from using enterprise policy keys to seize control of user browser settings.
Google implements dynamic patching and accelerated release cadences to combat a record-breaking surge in browser vulnerability reports.
Meta adds audio and video calling, call transfers, and new moderation tools to the WhatsApp web interface.
Learn how browser-based discovery functions as a reconnaissance technique used to map internal network resources from a web browser.
As AI reshapes how we access information, Arc Search introduces new tools to prioritize speed and de-cluttered browsing experiences.
Researchers report that critical security flaws in the Claude Chrome extension remain unpatched despite prior vulnerability disclosures.
A newly commissioned report alleges that Microsoft employs manipulative design patterns to steer Windows users toward the Edge browser.