Chrome

Malware on a Windows machine can bypass security measures to access passkey-protected accounts via vulnerabilities in Chrome's Google Password Manager. Unit 42 identified three attack methods, Pass-ta-key, Silver Pass-ta-key, and Golden Pass-ta-key, targeting the password manager's cloud authenticator.

Bor is an open-source system for centralized Linux desktop management, using a Go agent and central server to stream policies in real-time via mTLS/gRPC. Version 0.8 adds support for Thunderbird, Microsoft Edge for Business, and FirewallD zones, with existing support for Firefox, Chrome, KDE, dconf, polkit, and package management. The developer seeks feedback on the architecture and policy model for managing Linux workstations.

Google fixed more Chrome bugs in June than over the past two years, attributing the increase to AI. The article highlights a significant rise in security improvements for Chrome through AI-driven bug detection.

The Chaos ransomware gang is using a new backdoor called msaRAT that routes command-and-control (C2) traffic through Chrome or Edge browsers to hide communication. The malware disguises its C2 traffic by leveraging these commonly used web browsers.

The user clicked a phishing link associated with the Punchbowl scam, attempted to log in with their school email, and later discovered suspicious activity in Safari's recently closed tabs, including attempts to access their American Airlines account. They changed passwords and enabled two-factor authentication but remain concerned about potential compromise on Chrome.

The article highlights multiple security vulnerabilities and updates, including a Shark vacuum flaw exposing home data, security updates for Adobe, Chrome, Firefox, VMWare, and Zoom, Samsung's reversal on health data deletion, and a July 2026 Microsoft Patch Tuesday addressing 622 CVEs. It also warns of scams using FaceTime and fake Apple apps, along with AI-based Ghostcommit attacks and phishing threats.

Mozilla plans to shift Firefox Desktop and Android releases from a four-week to a two-week cadence starting September 2026, while Extended Support Releases (ESR) will remain annual. Firefox 153, scheduled for July 21, introduces features like improved PDF editing, QR code generation, and enhanced security measures.

Security updates for Adobe, Chrome, Firefox, VMWare, and Zoom address critical vulnerabilities including code execution flaws, authentication bypasses, and input validation issues. Users are urged to update affected software promptly to mitigate risks of exploitation.

Google has introduced its Gemini integration in Chrome for UK users. The feature is now available in the United Kingdom.

Europe’s top court upheld a €4.1 billion antitrust fine against Google for Android-related abuses, confirming the European Commission’s finding that Google imposed restrictions on smartphone makers and network operators to protect its Search and Chrome services. The ruling reinforces the Commission’s use of competition law to regulate digital platforms and closes a major antitrust case from former Competition Commissioner Margrethe Vestager’s tenure.

Google released a Chrome update addressing 382 security vulnerabilities, including 15 critical flaws that could enable sandbox escapes. The update, version 150.0.7871.47, includes fixes for a high-severity vulnerability (CVE-2026-13789) allowing remote attackers to perform sandbox escapes via a crafted HTML page.

The article highlights multiple cybersecurity threats, including malware stealing Chrome session cookies, parcel mule scams, and critical browser vulnerabilities. It also covers data breaches, phishing scams targeting website owners, and dark web activities involving stolen identities and malware.

A phishing email with a malicious JavaScript file disguised as a PDF installs a Chrome extension that steals session cookies and uses Chrome Native Messaging to execute PowerShell commands. The malware bypasses multi-factor authentication by hijacking active browser sessions and collects data like open tabs and system files.

Google released a Chrome update addressing 18 vulnerabilities, including four critical flaws. The update, rolling out to Windows, Mac, Linux, and Android, includes fixes for two critical WebGL vulnerabilities (CVE-2026-13028 and CVE-2026-13032) that could enable sandbox escapes via crafted HTML pages.

Microsoft CEO Steve Ballmer dismissed Google Chrome as a 'rounding error' in 2009 during a TechCrunch interview, but Google CEO Sundar Pichai later described the jab as motivation for Chrome's team to persist. Despite early struggles, Chrome overtook competitors to become the most-used browser by 2012, demonstrating Pichai's leadership and the team's aggressive iteration strategy.

Apple introduced an AI-powered Passwords app update that automatically strengthens weak or compromised passwords with a single tap. The feature integrates with Safari and Apple Intelligence to enhance password security, building on existing alerts for vulnerable credentials.

Google patched the fifth actively exploited Chrome zero-day of 2026, CVE-2026-11645, an out-of-bounds memory access flaw in the V8 JavaScript engine. The vulnerability was reported by researcher '303f06e3' and earned a $55,000 bounty, with technical details withheld to prevent further exploitation.

Google has released emergency updates to patch a new Chrome zero-day vulnerability that is being exploited in the wild. This marks the fifth such Chrome zero-day flaw patched since the start of the year.

An autonomous AI agent discovered 21 previously unknown vulnerabilities in FFmpeg, a widely used media library. Simultaneously, Google released Chrome 149, which includes patches for 429 security bugs, marking the most ever in a single Chrome update.

Google is testing a new feature in Chrome that directs searches to AI Mode by default. The experiment aims to integrate AI directly into Chrome search results.

A user expresses frustration with the current marketing-heavy web and prefers the simplicity of protocols like Gopher and Gemini. They manually add '/llm.txt' to websites for clearer, machine-readable content and question if the AI revolution could improve the web for humans.

DuckDuckGo has launched 'no AI' web extensions for Chrome and Firefox users to enhance accessibility to its 'no-AI' search engine, which is experiencing increased traffic.

The article discusses the growing competition in the browser market as alternative browsers aim to challenge Chrome and Safari in 2026.

Chrome is proposing a new API called Declarative partial updates, aimed at improving web development by enabling more efficient and declarative updates to parts of a web page. The feature is detailed in a Chrome blog post and has not yet received public comments.

A developer created a privacy-focused Chrome extension for cryptocurrency price alerts that operates without requiring login or user tracking. The tool sends browser notifications when Bitcoin and other crypto assets reach specified price targets, addressing the need for constant manual chart monitoring.

Google has published exploit code for a vulnerability in Chromium, threatening millions of users of Chrome, Microsoft Edge, and other browsers. The vulnerability can be exploited by any website a user visits, potentially creating a limited backdoor. This could allow an attacker to compromise thousands or millions of devices.

A user reported a discrepancy in staking rewards between using Rustiq validator in Phantom wallet on Chrome and Firefox, showing different APYs for the same validator. The issue was submitted by a user named mikeand241. The problem seems to be related to the browser used.

Moonshot AI has released a browser extension called Kimi WebBridge that allows AI agents to control your browser, clicking, scrolling, and filling forms without sending sessions outside your device. The extension is compatible with Chrome or Edge browsers. This innovation enables local data processing.

Rotunda is a Firefox fork built for agent use with features like realistic simulation of mouse movements and keyboard commands. It aims to make automated browsing more stealthy and natural. The project is still in its early stages and is available on GitHub.

A browser add-in called uBlock Origin Lite fork replaces ads with slogans from John Carpenter's film They Live. The add-in is published by Dave Lawrence and works in browsers such as Chrome and Edge. It uses a list of phrases from the movie to replace blocked ads.

Google is positioning Gemini as the AI layer across various devices, including phones, Chrome, laptops, and cars, through its latest Android rollout. This move aims to establish Gemini at the center of Android before Apple's AI reboot. The integration of Gemini will enhance user experience across different platforms.

Google announced new products and features at its Android Show, including AI-first Googlebooks laptops, Gemini features, and vibe-coded Android widgets. The company also unveiled refreshed Android Auto and Gemini in Chrome. These announcements were made ahead of the I/O event.

Gemini software will be available on Android devices in June, requiring a device with at least 4GB of RAM. The software is integrated into Chrome. Gemini's arrival on Android devices expands its reach to more users.

Google is announcing new Gemini features during its pre-I/O Android showcase, aiming to help users control their phones more efficiently. Gemini Intelligence brings together existing and new features for advanced Android devices. The features will be available in more places, such as Chrome on Android and autofill suggestions.

Google's Android 17 is coming this summer with new features, including the ability to generate custom widgets and access to Gemini Intelligence. Gemini can assist with tasks such as finishing a booking in Chrome on Android. The update will provide users with more personalized and efficient experiences.

Google has modified the disclosure language about its on-device AI in Chrome, but insists that processing stays on-device. The change prompted concerns from a privacy advocate, but Google claims it doesn't reflect a change in how data is handled. The issue arose as Chrome rolled out the Prompt API and downloaded Google's Nano model onto users' devices.

Google Chrome has been downloading a 4GB AI model for on-device processing for years, but recent notifications have caused confusion among users. The model is used to power features like Help Me Write, tab organization, and scam detection. Google's lack of explanation has contributed to the confusion.

OpenAI has debuted a Codex plugin for Chrome, potentially expanding Codex's capabilities beyond coding assistance. This new feature could enhance user experience and productivity. The development may lead to increased adoption of Codex.

Chrome has removed its disclosure promising to keep user data off Google's servers and is installing a 4GB AI on devices. The latest version of Chrome no longer includes this privacy promise. This change raises concerns about user data privacy.

Chrome users are concerned about Google's Gemini AI model being integrated into Chrome, but it can be easily uninstalled. The 4-GB model has sparked privacy concerns. Users have the option to remove it.