#chrome
-
319 Chrome extensions with 13.4 million installs hijacked searches for ad revenue
A Socket researcher has detailed a sprawling campaign in which hundreds of Chrome extensions quietly routed users' searches through operator-controlled servers to collect referral payments from Bing and Yahoo.
-
Chrome to Warn Users About ClickFix Command Traps
Google is adding ClickFix protection to Chrome: with Enhanced Protection on, the browser spots suspicious clipboard commands and warns users before they run them.
-
ChatGPT's Chrome extension can now read your open tabs
OpenAI has shut down its Atlas browser, but its Chrome extension now gains the ability to work with tabs you already have open and control them from the sidebar.
-
China's UTA0565 Chains Chrome and Windows Zero-Days to Drop CLEANGULP
The group leaned on a three-flaw exploit chain and fake media and NGO websites to escape the browser sandbox and infect victims with a new backdoor.
-
BragJack: One Extension Hijacks AI Agents in Browsers
Researcher Gal Weizman has shown how a single malicious extension seizes control of the built-in AI assistants of five popular browsers and forces them to act on the victim's behalf.
-
One Extension Against Five AI Browsers: How to Bypass an Agent's Defenses
Researchers at Forever Security have shown that an ordinary browser extension can hijack the built-in AI assistants in Chrome, Comet, Edge, Opera Neon and the Claude extension. For now, the attacks remain demonstrations.
-
Four Spy Groups Adopted the Same BlueMoon Exploit Kit Within a Week
Proofpoint has detailed a previously unknown exploit kit called BlueMoon that chains together Chrome and Windows vulnerabilities. Within a matter of days it was picked up by several cyberespionage groups, most of them linked to China.
-
Google Patches the Seventh Chrome 0-Day of the Year, Used in Attacks
On Tuesday, Google closed 230 vulnerabilities, among them an actively exploited zero-day flaw in Chrome.
-
PEEP Turns Chrome and Edge into Backdoors for Running Commands on the Host
SOCRadar researchers have exposed PEEP, a post-exploitation toolkit that masquerades as a bookmarks extension and turns the browser into a channel for remote access to the operating system.
-
Chrome once again makes an exception for Google in its site-data deletion settings
Developer Jeff Johnson has discovered that Chrome keeps google.com data even when the option to automatically delete all site data on closing windows is enabled. He found a similar bug six years ago.
-
Google Patches Actively Exploited 0-Day in Chrome's V8 Engine
An emergency Chrome update fixes 12 vulnerabilities, including CVE-2026-85046 in the V8 engine, for which a working exploit already exists.
-
Google Has Pulled Every Manifest V2 Extension from the Chrome Web Store — Including uBlock Origin
Chrome's years-long migration to a new extension platform is complete: Manifest V2 has been removed from the store entirely. One of the best ad blockers around, uBlock Origin, got caught in the sweep.
-
18 Chrome extensions and one for Edge stole crypto wallet keys
Socket researchers have exposed the Superior campaign: attackers bought up and built harmless extensions, then used auto-updates to turn them into tools for stealing cryptocurrency.
-
Google Experiments with Packaging Chrome in the Flatpak Format
Google engineers have added experimental support for packaging Chrome and Chromium as Flatpaks, but they aren't yet promising official maintenance of the format.
-
737 fake Chrome VPN extensions intercepted the traffic of Russian-speaking users
Researchers at Socket have uncovered a large-scale campaign: hundreds of free VPN extensions posed as well-known brands and routed all browser traffic through an attacker's proxy.
-
Chrome Will Protect Accounts from Session Cookie Theft
Google has built a device-bound session credentials mechanism into Chrome that ties a session to a hardware key store. The move is meant to shut down one of today's most common ways of hijacking accounts.
-
Chrome Prepares to Block New-Tab Hijacker Extensions
Google is developing a protection that will stop malicious programs from swapping out Chrome's start page and search engine through enterprise policies. The feature is still in development.
-
Chrome is testing an email verification protocol with no emails and no one-time codes
Google has launched an origin trial for the Email Verification API — a mechanism that lets a site confirm a user owns the address they entered, without sending them an email with a link or a code.
-
AI Helped Chrome Close 1,072 Vulnerabilities Across Two Releases
Google claims that language models have dramatically sped up the discovery and patching of holes in the browser: versions 149 and 150 fixed more bugs than the previous 23 releases combined.
-
msaRAT: the backdoor that hides its C2 traffic inside Chrome and Edge
The Chaos group is deploying a new Rust-based backdoor that routes command-and-control traffic through the system's own browser, leaving almost no trace on the network.
- More