Chrome puts insecure sites behind a permission prompt 2026-10-22 at 01:30 By Anamarija Pogorelec Google has rolled out a change to Chrome that asks users for permission before making an insecure HTTP connection. The protection is now enabled by default for all users, following its introduction earlier this year for users of Safe Browsing’s Enhanced […]
Chrome puts insecure sites behind a permission prompt Read More »
Safari blocks trackers that turn your email into a tracking ID 2026-10-21 at 11:53 By Anamarija Pogorelec Apple’s new anti-tracking protections in Safari and WebKit, the open-source web engine used by Safari, block connections to identity resolution services that turn email addresses into persistent tracking identifiers. How email addresses become tracking IDs This “post-cookie” tracking […]
Safari blocks trackers that turn your email into a tracking ID Read More »
Chrome flags malicious commands that scammers pass off as fixes 2026-10-20 at 20:00 By Anamarija Pogorelec Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command. The company introduced Enhanced Protection for Chrome’s Safe Browsing feature in 2020 to address online […]
Chrome flags malicious commands that scammers pass off as fixes Read More »
Half the AI bot traffic hammering your website comes from Meta 2026-10-19 at 07:30 By Anamarija Pogorelec AI agent traffic across DataDome’s network grew 41.5% quarter over quarter to nearly 25 billion requests in Q3 2026, according to the company’s AI Traffic Report Q3 2026. Meta’s Muse generated 29.1 million requests between September 22 and […]
Half the AI bot traffic hammering your website comes from Meta Read More »
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise 2026-10-14 at 10:38 By Ionut Arghire Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise Read More »
Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser 2026-10-13 at 14:21 By Anamarija Pogorelec Mozilla’s Firefox Enterprise is a paid platform that lets organizations control how sensitive data is shared, check device security, and manage employee access to web applications. The platform pairs the browser with a management dashboard hosted on an […]
Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser Read More »
Chaos ransomware msaRAT hides its C2 channel inside a legitimate browser process 2026-07-23 at 13:38 By Mirko Zorz Cisco Talos has identified a Rust-based remote access trojan it attributes to the Chaos ransomware group, named msaRAT after four of the binding names left in the binary. The tool starts its own instance of Chrome or […]
Chaos ransomware msaRAT hides its C2 channel inside a legitimate browser process Read More »
Your browser tab could become encrypted storage for someone else’s files 2026-06-19 at 08:30 By Mirko Zorz Decentralized storage networks already hand pieces of people’s data to strangers’ machines. The lasting question across these networks is whether the machine holding the data can read it. A research paper by Gregory Magarshak, a professor at IENYC, […]
Your browser tab could become encrypted storage for someone else’s files Read More »
Websites can spy on user activity by analyzing SSD behavior 2026-05-29 at 14:08 By Sinisa Markovic Websites have spent years collecting information about visitors through browser fingerprinting, tracking scripts, and other techniques designed to identify devices and monitor behavior. Researchers have demonstrated another method that relies on something most users would never expect a website […]
Websites can spy on user activity by analyzing SSD behavior Read More »
To counter cookie theft, Chrome ships device-bound session credentials 2026-04-10 at 14:45 By Mirko Zorz Cookie theft follows a well-established pattern. Infostealer malware infiltrates a device, extracts authentication cookies, and exfiltrates them to an attacker-controlled server. Because cookies often have extended lifetimes, attackers can access accounts without passwords, then bundle and sell the stolen credentials. […]
To counter cookie theft, Chrome ships device-bound session credentials Read More »
Firefox is getting a free built-in VPN 2026-03-18 at 15:24 By Sinisa Markovic Mozilla is adding a free built-in VPN to Firefox, with the feature arriving in Firefox 149 on March 24. Privacy concerns often follow free VPN services, especially when unclear data practices put user information at risk. Mozilla says its version is grounded […]
Firefox is getting a free built-in VPN Read More »
Microsoft Edge 146 adds IP privacy and local network access controls 2026-03-16 at 15:10 By Anamarija Pogorelec Microsoft Edge version 146 (Stable) became available on March 13, 2026, bringing updates to tracking protection, IP privacy, and enterprise network security policies. One change affects tracking prevention in InPrivate browsing. InPrivate windows use the same tracking prevention […]
Microsoft Edge 146 adds IP privacy and local network access controls Read More »
Firefox to let users manage and block AI features 2026-02-03 at 15:15 By Sinisa Markovic Mozilla will add a set of controls in Firefox that let users manage and block GenAI features in the desktop browser. The controls will be included in Firefox version 148 on February 24, 2026. “We believe choice is more important […]
Firefox to let users manage and block AI features Read More »
Grammarly and QuillBot are among widely used Chrome extensions facing serious privacy questions 2026-01-28 at 08:15 By Anamarija Pogorelec A new study shows that some of the most widely used AI-powered browser extensions are a privacy risk. They collect lots of data and require a high level of browser access. The research was conducted by […]
Fake browser crash alerts turn Chrome extension into enterprise backdoor 2026-01-19 at 17:21 By Zeljka Zorz Browser extensions are a high-risk attack vector for enterprises, allowing threat actors to bypass traditional security controls and gain a foothold on corporate endpoints. Case in point: A recently identified malicious extension called NexShield proves that a single user […]
Fake browser crash alerts turn Chrome extension into enterprise backdoor Read More »
Browser agents don’t always respect your privacy choices 2025-12-22 at 08:49 By Sinisa Markovic Browser agents promise to handle online tasks without constant user input. They can shop, book reservations, and manage accounts by driving a web browser through an AI model. A new academic study warns that this convenience comes with privacy risks that […]
Browser agents don’t always respect your privacy choices Read More »
New “HashJack” attack can hijack AI browsers and assistants 2025-11-26 at 14:18 By Zeljka Zorz Security researchers at Cato Networks have uncovered a new indirect prompt injection technique that can force popular AI browsers and assistants to deliver phishing links or disinformation (e.g., incorrect medicine dosage guidance or investment advice), send sensitive data to the […]
New “HashJack” attack can hijack AI browsers and assistants Read More »
SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability 2025-11-21 at 13:20 By Eduard Kovacs SquareX claims to have found a way to abuse a hidden Comet API to execute local commands, but Perplexity says the research is fake. The post SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability appeared first on SecurityWeek. This […]
SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability Read More »
Security gap in Perplexity’s Comet browser exposed users to system-level attacks 2025-11-20 at 17:56 By Zeljka Zorz There is a serious security problem inside Comet, the AI-powered agentic browser made by Perplexity, SquareX researchers say: Comet’s MCP API allows the browser’s built-in (but hidden from the user) extensions to issue commands directly to a user’s […]
Security gap in Perplexity’s Comet browser exposed users to system-level attacks Read More »
The browser is eating your security stack 2025-11-13 at 07:39 By Anamarija Pogorelec Employees log into SaaS platforms, upload files, use AI tools, and manage customer data from a single tab. While the browser has become the enterprise’s main workspace, it remains largely outside the reach of security controls. According to the 2025 Browser Security […]
The browser is eating your security stack Read More »