ThreatVectr
Tag

#browser-security

38 stories taggedbrowser-security.

A user at a laptop with Chrome and Firefox browser windows both open on screen, each showing update notifications or completed update confirmations displayed si
Vulnerabilities

Chrome and Firefox Fix 115 Security Flaws in Back-to-Back Updates

Google and Mozilla have each pushed out new browser versions carrying fixes for dozens of vulnerabilities, three of them rated critical in Chrome. Neither company has seen any of the flaws used in real attacks, but the advice is the same: update now.

3 min read
A web browser window showing multiple AI assistant icons in the address bar and sidebar, with an invisible threat indicator or code injection visual metaphor la
AI Security

One Browser Extension Can Hijack the AI Assistants in Chrome, Edge, Comet, Opera Neon and Claude

Forever Security researchers built a proof-of-concept extension that quietly took the wheel of built-in AI helpers across five Chromium browsers.

3 min read
A smartphone screen showing the Chrome browser interface with a warning alert overlaid, surrounded by blurred cybersecurity monitoring dashboards and threat det
Vulnerabilities

Google Patches Fifth Chrome Zero-Day of 2022 as Attacks Continue

A flaw in how Chrome handles Android deep links is being actively exploited. It's the fifth Chrome vulnerability criminals have used in the wild this year, and the patch window is tight.

3 min read
A software developer's IDE displaying JavaScript code with highlighted vulnerability sections, accompanied by Chrome browser windows showing error logs and cras
Vulnerabilities

Google rushes out Chrome fix after hackers exploit V8 flaw in the wild

A type confusion bug in Chrome's JavaScript engine is already being used in real attacks. Update your browser now.

3 min read
A laptop keyboard in close focus with a hand hovering over the keys, a browser window visible on the monitor behind showing an email inbox with multiple message
Identity & Access

Brave Rolls Out Email Aliases to Cut Off a Common Path to Phishing

Version 1.94 of the Brave browser lets users mask their real inbox behind disposable addresses, aiming to blunt data-broker resale and post-breach phishing.

4 min read
A computer workstation surrounded by multiple monitors displaying code snippets, vulnerability alerts, and security patch notes, with a single red vulnerability
Vulnerabilities

Chrome 152 Patches 327 Security Flaws, Most Found by Google's Own AI

Google's largest Chrome update fixes hundreds of vulnerabilities at once, with its own AI tools responsible for the overwhelming majority of discoveries.

3 min read
Browser windows for both Firefox and Chrome open side-by-side, each displaying security update notifications with patch notes listing dozens of vulnerability fi
Vulnerabilities

Firefox and Chrome Rush Out Patches for Dozens of Security Flaws

Mozilla fixed 58 vulnerabilities in Firefox 154, while Google addressed 15 in Chrome 151, including two critical bugs that could let attackers run malicious code on your device.

3 min read
A MacBook and iPhone arranged on a desk with security software windows open on the screen, displaying patch installation progress bars and system update notific
Vulnerabilities

Apple Patches Dozens of WebKit Flaws That Could Let Attackers Crash or Spy on Your iPhone and Mac

A wave of security fixes landed for iPhones and Macs, closing holes in the browser engine that powers Safari. Some bugs were serious enough to let criminals steal data or break out of the software's built-in safety walls.

3 min read
A MacBook Pro on a desk with suspicious activity indicators on the screen, password manager notifications and browser tabs visible, representing credential thef
Threat Intelligence

AmnesiaStealer: New Mac Malware Quietly Drains Passwords and Browser Sessions

A newly identified piece of malicious software targeting Apple Mac computers can lift saved passwords, browser cookies, and sensitive keychain data, and it's written in a programming language that makes it harder for security tools to catch.

3 min read
A mobile phone screen showing Google Chrome browser with notification popups being blocked and filtered, junk notification examples appearing and disappearing,
Threat Intelligence

Chrome Now Blocks 7 Billion Junk Notifications a Day on Android

Google's browser is quietly killing off scam pop-ups at the source, using layered checks that yank permissions from sites behaving badly.

4 min read
A browser window with multiple tabs open, one tab showing a disguised affiliate link redirecting, subtle visual glitch or redirect animation captured mid-frame,
Threat Intelligence

Banned Chrome Extension Returns With Hidden Affiliate Scam, and Security Researchers Warn the Next Version Could Be Worse

A browser add-on pulled from the Chrome Web Store for stealing AI chat conversations is back, and it's now quietly opening affiliate links on users' computers every time it updates.

4 min read
A browser window showing the Chrome update notification center with multiple critical security patches listed, and system processes running in the background to
Vulnerabilities

Google Patches 41 Security Flaws in Chrome 151, Six Rated Critical

The latest Chrome update fixes a cluster of memory-safety bugs that could let attackers crash your browser or run malicious code on your device. Here is what happened and what you should do.

3 min read
A web browser window open to a chat interface, with data streams and information flowing across the screen behind translucent security barrier elements that app
AI Security

The browser is the new endpoint, and AI just made everyone notice

AI chatbots didn't invent the problem of data leaking through web browsers. They just made it impossible for security teams to keep pretending it wasn't there.

5 min read
A security researcher's workstation showing three different web browser windows open side-by-side, each displaying data extraction alerts and warning messages,
AI Security

AI Browsers Can Be Tricked Into Stealing Your Data, and Nobody Has a Fix Yet

A security researcher at Black Hat tested three major AI-powered browsers and found every single one could be manipulated by hidden instructions on a webpage. The people building these tools say there is no perfect solution.

4 min read
Multiple fake login pages loading rapidly across browser tabs, with blocklist databases shown as outdated in the taskbar
Threat Intelligence

Why Blocklists Can't Keep Up With AI-Built Phishing Sites

Attackers are spinning up throwaway phishing pages faster than defenders can list them. Researchers at Push Security argue the fix is watching what a page does, not where it lives.

4 min read
© 2026 Threat Vectr