ThreatVectr
Tag

#browser-security

35 stories taggedbrowser-security · page 2 of 3.

Photoreal news-editorial overhead shot of a darkened security operations center desk, multiple monitors glowing blue with abstract vulnerability dashboards and
Vulnerabilities

Google Patches Seven Memory Safety Bugs in Chrome 150, Three Rated Critical

All seven flaws were found internally or by researchers, not by criminals. But history says patch fast anyway.

3 min read
Full-frame close-up of a laptop screen showing a fake browser error dialog with a copy-paste instruction box, warm desk lamp light, blurred office background, m
Identity & Access

Microsoft sees spike in ACR Stealer attacks lifting passwords and session tokens from browsers

The info-stealer is arriving through fake 'fix this error' prompts and hidden inside JPEG images, and it walks off with the browser cookies that keep users signed in.

4 min read
Full-frame edge-to-edge photoreal news-editorial image of a modern laptop screen showing an abstract browser window with a glowing extension icon in the toolbar
AI Security

A Flaw in Claude's Chrome Extension Let Rogue Add-ons Hijack the AI Assistant

Anthropic patched a bug that let malicious browser extensions puppet Claude into touching a user's Gmail, Google Docs, and Salesforce accounts.

3 min read
Full-frame photoreal editorial shot of a modern laptop on a dark desk, screen glowing with an abstract orange and blue browser update notification, soft depth o
Vulnerabilities

Firefox Rushes Out Fix After Attack Code for Two Critical Bugs Appears Online

Mozilla says working exploit code is already public for two serious flaws in its browser. Users should update now.

3 min read
Photoreal editorial image, full frame 16:9, of a modern open-plan office at dusk with rows of laptops glowing on empty desks, soft blue and amber light, a trans
AI Security

The AI Blind Spot in Corporate Security: Why Old Traffic Inspection Is Falling Behind

Employees are pasting company secrets into ChatGPT and installing rogue browser add-ons. The security tools most firms rely on can't see any of it.

4 min read
Close-up top-down view of a sleek laptop keyboard with a shallow depth of field, the screen faintly glowing blue-white with an abstract grid of hexagonal shapes
Vulnerabilities

Google Patches 27 Chrome Flaws, Two Rated Critical

Chrome 150 arrives with fixes for a string of memory-related bugs, most of them found by Google's own engineers rather than outside researchers.

3 min read
Full-frame 16:9 photoreal editorial shot of a darkened desk with a gaming laptop open, screen glowing with a generic browser window and a translucent overlay su
Vulnerabilities

Opera GX Bug Let Any Website Silently Install a Data-Stealing Add-On

Researchers rebuilt a signed-in user's Gmail address from one page visit. Opera has patched the flaw.

3 min read
Extreme close-up of a glowing green padlock icon cracking apart on a dark laptop screen, shards of digital light scattering across a desk surface, shallow depth
Vulnerabilities

Google Patches Fifth Chrome Zero-Day of 2022 as Hackers Actively Exploit the Flaw

A flaw in how Chrome handles a mobile-linking feature is being weaponised in real attacks. It's the fifth time this year Google has had to rush out an emergency fix for its browser.

3 min read
Full-frame photoreal editorial image of a laptop screen showing a generic web browser with a red warning icon in the address bar and a blurred popup dialog, dim
Threat Intelligence

Opera's new Paste Protect tries to stop the copy-paste scam that's been draining wallets

The browser will now block dodgy commands before they reach your clipboard, targeting the ClickFix trick that has become criminals' favourite way to trick people into infecting their own computers.

3 min read
AI Security

Context Manipulation Attack 'BioShocking' Turns Agentic Browsers Into Credential Thieves

Researchers demonstrate how feeding poisoned context to AI-driven browser agents causes them to quietly drop safety guardrails and exfiltrate stored credentials.

2 min read
AI Security

DeepSeek-Generated PoC Ransomware Runs Entirely in the Browser via Chromium File System Access API

Researchers documented what they describe as the first frontier-model-produced malware artifact combining LLM ideation with a legitimate Chromium capability to encrypt user files without a native binary.

3 min read
AI Security

DeepSeek Spits Out Working Browser-Native Ransomware for Windows and Android

Researchers say a frontier model stitched together a real Chromium capability with fantasy malware ideas and produced something that actually encrypts files from inside a tab.

3 min read
AI Security

Malicious Extension Spoofs AI Platform to Intercept Searches

A fake browser extension impersonating Perplexity AI intercepted search queries, highlighting governance gaps in enterprise security.

2 min read
AI Security

BioShocking: Prompt-Game Trick Pries Credentials From AI Browsers

Researchers at LayerX got six AI browsers and assistants — including ChatGPT Atlas, Perplexity's Comet, and Anthropic's Claude extension — to exfiltrate user logins by framing the attack as a game.

3 min read
Threat Intelligence

Fake Perplexity Extension Siphoned Every Chrome Address Bar Keystroke

Microsoft researchers flagged a counterfeit Perplexity Chrome extension that piped queries and omnibox input to an attacker server before completing the search.

3 min read
© 2026 Threat Vectr