Chrome

Europe’s top court upheld a €4.1 billion antitrust fine against Google for Android-related abuses, confirming the European Commission’s finding that Google imposed restrictions on smartphone makers and network operators to protect its Search and Chrome services. The ruling reinforces the Commission’s use of competition law to regulate digital platforms and closes a major antitrust case from former Competition Commissioner Margrethe Vestager’s tenure.

Google released a Chrome update addressing 382 security vulnerabilities, including 15 critical flaws that could enable sandbox escapes. The update, version 150.0.7871.47, includes fixes for a high-severity vulnerability (CVE-2026-13789) allowing remote attackers to perform sandbox escapes via a crafted HTML page.

The article highlights multiple cybersecurity threats, including malware stealing Chrome session cookies, parcel mule scams, and critical browser vulnerabilities. It also covers data breaches, phishing scams targeting website owners, and dark web activities involving stolen identities and malware.

A phishing email with a malicious JavaScript file disguised as a PDF installs a Chrome extension that steals session cookies and uses Chrome Native Messaging to execute PowerShell commands. The malware bypasses multi-factor authentication by hijacking active browser sessions and collects data like open tabs and system files.

Google released a Chrome update addressing 18 vulnerabilities, including four critical flaws. The update, rolling out to Windows, Mac, Linux, and Android, includes fixes for two critical WebGL vulnerabilities (CVE-2026-13028 and CVE-2026-13032) that could enable sandbox escapes via crafted HTML pages.

Microsoft CEO Steve Ballmer dismissed Google Chrome as a 'rounding error' in 2009 during a TechCrunch interview, but Google CEO Sundar Pichai later described the jab as motivation for Chrome's team to persist. Despite early struggles, Chrome overtook competitors to become the most-used browser by 2012, demonstrating Pichai's leadership and the team's aggressive iteration strategy.

Apple introduced an AI-powered Passwords app update that automatically strengthens weak or compromised passwords with a single tap. The feature integrates with Safari and Apple Intelligence to enhance password security, building on existing alerts for vulnerable credentials.

Google patched the fifth actively exploited Chrome zero-day of 2026, CVE-2026-11645, an out-of-bounds memory access flaw in the V8 JavaScript engine. The vulnerability was reported by researcher '303f06e3' and earned a $55,000 bounty, with technical details withheld to prevent further exploitation.

Google has released emergency updates to patch a new Chrome zero-day vulnerability that is being exploited in the wild. This marks the fifth such Chrome zero-day flaw patched since the start of the year.

An autonomous AI agent discovered 21 previously unknown vulnerabilities in FFmpeg, a widely used media library. Simultaneously, Google released Chrome 149, which includes patches for 429 security bugs, marking the most ever in a single Chrome update.

Google is testing a new feature in Chrome that directs searches to AI Mode by default. The experiment aims to integrate AI directly into Chrome search results.

A user expresses frustration with the current marketing-heavy web and prefers the simplicity of protocols like Gopher and Gemini. They manually add '/llm.txt' to websites for clearer, machine-readable content and question if the AI revolution could improve the web for humans.

DuckDuckGo has launched 'no AI' web extensions for Chrome and Firefox users to enhance accessibility to its 'no-AI' search engine, which is experiencing increased traffic.

The article discusses the growing competition in the browser market as alternative browsers aim to challenge Chrome and Safari in 2026.

Chrome is proposing a new API called Declarative partial updates, aimed at improving web development by enabling more efficient and declarative updates to parts of a web page. The feature is detailed in a Chrome blog post and has not yet received public comments.

A developer created a privacy-focused Chrome extension for cryptocurrency price alerts that operates without requiring login or user tracking. The tool sends browser notifications when Bitcoin and other crypto assets reach specified price targets, addressing the need for constant manual chart monitoring.

Google has published exploit code for a vulnerability in Chromium, threatening millions of users of Chrome, Microsoft Edge, and other browsers. The vulnerability can be exploited by any website a user visits, potentially creating a limited backdoor. This could allow an attacker to compromise thousands or millions of devices.

A user reported a discrepancy in staking rewards between using Rustiq validator in Phantom wallet on Chrome and Firefox, showing different APYs for the same validator. The issue was submitted by a user named mikeand241. The problem seems to be related to the browser used.

Moonshot AI has released a browser extension called Kimi WebBridge that allows AI agents to control your browser, clicking, scrolling, and filling forms without sending sessions outside your device. The extension is compatible with Chrome or Edge browsers. This innovation enables local data processing.

Rotunda is a Firefox fork built for agent use with features like realistic simulation of mouse movements and keyboard commands. It aims to make automated browsing more stealthy and natural. The project is still in its early stages and is available on GitHub.

A browser add-in called uBlock Origin Lite fork replaces ads with slogans from John Carpenter's film They Live. The add-in is published by Dave Lawrence and works in browsers such as Chrome and Edge. It uses a list of phrases from the movie to replace blocked ads.

Google is positioning Gemini as the AI layer across various devices, including phones, Chrome, laptops, and cars, through its latest Android rollout. This move aims to establish Gemini at the center of Android before Apple's AI reboot. The integration of Gemini will enhance user experience across different platforms.

Google announced new products and features at its Android Show, including AI-first Googlebooks laptops, Gemini features, and vibe-coded Android widgets. The company also unveiled refreshed Android Auto and Gemini in Chrome. These announcements were made ahead of the I/O event.

Gemini software will be available on Android devices in June, requiring a device with at least 4GB of RAM. The software is integrated into Chrome. Gemini's arrival on Android devices expands its reach to more users.

Google is announcing new Gemini features during its pre-I/O Android showcase, aiming to help users control their phones more efficiently. Gemini Intelligence brings together existing and new features for advanced Android devices. The features will be available in more places, such as Chrome on Android and autofill suggestions.

Google's Android 17 is coming this summer with new features, including the ability to generate custom widgets and access to Gemini Intelligence. Gemini can assist with tasks such as finishing a booking in Chrome on Android. The update will provide users with more personalized and efficient experiences.

Google has modified the disclosure language about its on-device AI in Chrome, but insists that processing stays on-device. The change prompted concerns from a privacy advocate, but Google claims it doesn't reflect a change in how data is handled. The issue arose as Chrome rolled out the Prompt API and downloaded Google's Nano model onto users' devices.

Google Chrome has been downloading a 4GB AI model for on-device processing for years, but recent notifications have caused confusion among users. The model is used to power features like Help Me Write, tab organization, and scam detection. Google's lack of explanation has contributed to the confusion.

OpenAI has debuted a Codex plugin for Chrome, potentially expanding Codex's capabilities beyond coding assistance. This new feature could enhance user experience and productivity. The development may lead to increased adoption of Codex.

Chrome has removed its disclosure promising to keep user data off Google's servers and is installing a 4GB AI on devices. The latest version of Chrome no longer includes this privacy promise. This change raises concerns about user data privacy.

Chrome users are concerned about Google's Gemini AI model being integrated into Chrome, but it can be easily uninstalled. The 4-GB model has sparked privacy concerns. Users have the option to remove it.

Chrome removes claim of On-device AI not sending data to Google Servers, indicating a change in its privacy policy. The article discusses this development on Reddit and Y Combinator. This move may impact user perceptions of Chrome's data handling.

Chrome on Android now supports approximate location sharing instead of precise location sharing, giving users more control over their location data. This feature is a small win for Android users. The new feature allows for more privacy and security when sharing location data with websites.

A researcher alleges that Chrome downloads a 4GB AI file without user consent and the file reappears if deleted. The download occurs without an opt-in option. This behavior raises concerns about user privacy and data storage.

Mozilla criticizes Google for integrating the Prompt API into Chrome, arguing it undermines web openness. The API, already being tested in Chrome and Microsoft Edge, has sparked Mozilla's opposition.

Mozilla has publicly opposed Chrome's proposed Prompt API, citing concerns over user privacy and potential abuse by websites. The issue highlights tensions between browser vendors regarding web standards and user control.

Google has introduced the Prompt API as part of Chrome's AI features, enabling developers to integrate AI prompts into web applications. The article links to Chrome's developer documentation and a Hacker News discussion with 17 points and 7 comments.

Browser Harness is a new tool that grants LLMs maximum freedom to perform browser tasks by removing restrictive frameworks. It uses Chrome's CDP websocket with self-correction and dynamic tool creation, enabling LLMs to handle edge cases like file downloads and cross-origin iframes autonomously. Examples include playing Stockfish, setting Tetris records, and generating JavaScript to draw a heart.

Google has introduced Gemini-powered 'auto browse' features in Chrome for enterprise users, enabling automation of tasks such as research and data entry. This enhancement aims to improve workplace efficiency through AI integration.

Google has expanded its Gemini AI integration in Chrome to users in Australia, Japan, Singapore, and South Korea. This rollout marks the feature's availability in additional international markets.