Cyber CrimeNemoClaw Flaw Opens Local AI Agents to Browser-Based Attacks
A single website visit can hijack NemoClaw's local Ollama model server via DNS rebinding, according to new research.
> Search
26 results for “browser”
Cyber Crime
SecurityAliExpress caught using inaudible audio to fingerprint browsers
Researcher discovers AliExpress using obsolete WebAudio fingerprinting; Firefox fix likely neutralizes it.
Cyber CrimeMalicious Firefox Add-ons Target Web3 Wallets
Researchers found 40 malicious Firefox extensions impersonating Web3 products to steal wallet secrets.
SecurityRansomware in VMware Attack Looks Like a Distraction
Researchers say a suspected China-nexus APT used a VMware flaw to deploy ransomware as a smoke screen.
SecurityAmnesiaStealer Browser Hijack Raises Stakes for macOS
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
SecurityAmnesiaStealer: New macOS Malware Shows Depth
Researchers have uncovered a new macOS infostealer that uses ClickFix social engineering and has stealthy remote browser control capabilities.
SecurityChrome 151 Update Addresses 41 Security Flaws
Google has issued a new browser update addressing 41 critical and high-severity vulnerabilities across multiple platforms.
SecurityBrowser Security Gaps in the AI Era
The shift toward browser-based workflows and AI tools is revealing significant vulnerabilities in traditional network security.
SecurityCourt Rules Browser Tools Bypass CFAA
An appellate court has affirmed that the creation of a web browser does not constitute a violation of the CFAA.
Tech NewsMozilla Eyes Browser as an AI Layer
Ajit Varma, Head of Firefox at Mozilla, discusses the browser's role in a future dominated by AI and closed ecosystems.
SecurityChrome Targets Policy-Based Hijacking
Google's upcoming update aims to stop malware from using enterprise policy keys to seize control of user browser settings.
SecurityChrome Security Cycles Reach New Peak
Google implements dynamic patching and accelerated release cadences to combat a record-breaking surge in browser vulnerability reports.
Tech NewsWhatsApp Expands Calling to Web Browser
Meta adds audio and video calling, call transfers, and new moderation tools to the WhatsApp web interface.
SecurityWhat Is Browser-Based Discovery? A Quick Guide
Learn how browser-based discovery functions as a reconnaissance technique used to map internal network resources from a web browser.
Tech NewsArc Search and the AI Browser Shift
As AI reshapes how we access information, Arc Search introduces new tools to prioritize speed and de-cluttered browsing experiences.
SecurityClaude Extension Bypass Stays Open
Researchers report that critical security flaws in the Claude Chrome extension remain unpatched despite prior vulnerability disclosures.
Tech NewsMozilla Report Targets Microsoft Tactics
A newly commissioned report alleges that Microsoft employs manipulative design patterns to steer Windows users toward the Edge browser.
SecurityWhy SASE Architectures Face New Hurdles
Modern internet protocols and the rise of AI workflows are challenging the effectiveness of traditional network-centric security.
SecurityAnthropic Claude Extension Security Gaps
Security research indicates that vulnerabilities in the Claude for Chrome extension remain unpatched eight versions after initial reports.
SecurityTrusted Browser Tool Becomes Vector for Hidden Data Exfiltration
A widely used extension for developers and testers was found harboring spyware that sent user traffic data to remote servers.
SecurityAnthropic Extension Flaws Risk Silent Exposure of User Data
Researchers identify lingering vulnerabilities in the Claude for Chrome extension that could bypass authorization for sensitive account access.
SecurityCrypto Wallets Are Leaking Identity Data By Design, Researchers Say
A study of 85 browser-based wallets reveals systemic privacy flaws that allow for cross-site tracking and the de-anonymization of users.
SecurityStudent Proxy Campaign Turns npm Into a Distributed DDoS Weapon
A swarm of 148 malicious npm packages exploited student browsers to fuel a sophisticated, dual-layered botnet operation.
SecurityModHeader Fallout: Trusted Extensions Harboring Dormant Data Traps
A popular header-editing tool was removed from major stores after researchers discovered a silent, encrypted exfiltration system.
SecurityThe Hallucination Trap: How AI Browsers Fail Under Pressure
New research reveals that AI browsers can be tricked into ignoring safety guardrails by forcing them into a state of logical delusion.
SecurityScanBox Attacks: The Persistent Threat of Stealthy Browser Recon
A sophisticated China-based actor is leveraging watering hole tactics and keylogging to compromise targets across the maritime sector.