SecurityChrome 154 Fixes 108 Flaws, 11 Critical
Google's latest stable release patches a wide swath of memory-safety bugs, but most bug bounty payouts remain undecided.
> Search
23 results for “chrome”
Security
Cyber CrimeKREMLIN Malware Hijacks Chrome and Edge
Elastic Security Labs details a Brazilian banking malware toolkit that abuses browser extension installs and Ethereum smart contracts to steal credentials and sessions.
Cyber CrimePatch-Gap Zero-Days Fueled BlueMoon Kit
A new exploit kit chains four Chrome and Windows flaws, revealing how quickly attackers weaponize the delay between open-source fixes and stable browser patches.
Cyber CrimeOne Exploit Kit, Four Spy Groups, One Week
Proofpoint says China-aligned clusters rapidly adopted BlueMoon, a Chrome and Windows exploit chain that may have cost far less to build than expected.
SecurityFortinet Critical Patches Target JWT Bypass and Browser Proxy
Fortinet patches two critical flaws: one bypassing FortiMonitorOnSight auth via JWT, another allowing browser traffic proxy.
SecurityChrome Fixes 230 Flaws; 7th Zero-Day Exploited
Google patches an in-the-wild V8 out-of-bounds write bug, marking the seventh exploited zero-day this year.
Tech NewsChrome's Faster Fixes Set New Browser Baseline
Google moves Chrome to a two-week release cycle to speed security patches and feature delivery.
SecurityChrome V8 Zero-Day Under Attack Gets Emergency Patch
Google patches a high-severity type confusion bug in V8 that has been exploited in the wild, the sixth zero-day fixed this year.
SecurityBrowser extensions turn into supply chain risk
Attackers buy legitimate Chrome, Edge extensions and push malware via updates, Socket reports.
Cyber CrimeFake VPN Extensions Hijack Traffic
Hundreds of malicious Chrome extensions impersonate VPNs, routing user traffic through a proxy.
SecurityFake CCleaner sites push Chrome spyware
Malwarebytes finds fake CCleaner downloads installing GhostDesk Chrome extension for credential theft and surveillance.
SecurityChrome's anti-abuse layers curb 7B notification spam
Google says Chrome's layered defenses cut unwanted Android notifications by over 7 billion daily in Q1 2026.
SecurityChrome's New Defense Against Cookie Theft
Device-bound session credentials could curb account takeovers, but rollout is limited for now.
SecurityPasskey Defenses Undermined by Weak Surroundings
Recent research shows passkey protections can be bypassed without breaking the underlying cryptography.
SecurityChrome 151 Update Addresses 41 Security Flaws
Google has issued a new browser update addressing 41 critical and high-severity vulnerabilities across multiple platforms.
SecurityChrome Targets Policy-Based Hijacking
Google's upcoming update aims to stop malware from using enterprise policy keys to seize control of user browser settings.
SecurityChrome Security Cycles Reach New Peak
Google implements dynamic patching and accelerated release cadences to combat a record-breaking surge in browser vulnerability reports.
SecurityClaude Extension Bypass Stays Open
Researchers report that critical security flaws in the Claude Chrome extension remain unpatched despite prior vulnerability disclosures.
SecurityAnthropic Claude Extension Security Gaps
Security research indicates that vulnerabilities in the Claude for Chrome extension remain unpatched eight versions after initial reports.
SecurityTrusted Browser Tool Becomes Vector for Hidden Data Exfiltration
A widely used extension for developers and testers was found harboring spyware that sent user traffic data to remote servers.
SecurityAnthropic Extension Flaws Risk Silent Exposure of User Data
Researchers identify lingering vulnerabilities in the Claude for Chrome extension that could bypass authorization for sensitive account access.
SecurityModHeader Fallout: Trusted Extensions Harboring Dormant Data Traps
A popular header-editing tool was removed from major stores after researchers discovered a silent, encrypted exfiltration system.
SecurityGoogle Chrome Zero-Day Vulnerabilities Demand Urgent User Vigilance
A critical high-risk vulnerability in Chrome’s Intents feature has been patched, marking the fifth exploited zero-day of the year.