Google Chrome

A Chinese threat actor, identified as UTA0565, has been observed exploiting a newly disclosed exploit chain involving Google Chrome and Microsoft Windows as zero-days. These attacks, detected between September 3 and September 4, 2026, utilized a sophisticated method of chaining…

A sophisticated banking malware operation, active since mid-2025, has been utilizing a toolkit identified as KREMLIN to circumvent browser security mechanisms and force the installation of malicious extensions for Google Chrome and Microsoft Edge.

A Chinese threat actor, identified by the moniker UTA0560, has been linked to a sophisticated spear-phishing campaign that leveraged a chain of recently patched zero-day vulnerabilities affecting both Google Chrome and Microsoft Windows.

Four distinct espionage-motivated threat groups utilized a newly identified exploit kit, named BlueMoon, within a single week, demonstrating a coordinated or rapidly spreading exploitation campaign. This previously undocumented kit leverages multiple vulnerabilities affecting both Microsoft Windows operating systems and Google…

Cybersecurity researchers have detailed a sophisticated post-exploitation toolkit named PEEP, designed to transform web browsers like Google Chrome and Microsoft Edge into persistent backdoors capable of executing host commands. This toolkit operates by masquerading as a seemingly innocuous bookmarks extension…

Cybersecurity researchers have identified a significant cluster of 19 malicious browser extensions, comprising 18 for Google Chrome and one for Microsoft Edge, that were covertly designed to steal cryptocurrency wallet secrets and drain user funds.

North Korean threat actors, previously associated with the Contagious Interview campaign, have deployed 108 distinct malicious packages and web browser extensions across multiple platforms. This activity, identified as the PolinRider campaign, targets repositories such as npm, Packagist, and Go, alongside…

This week's cybersecurity threats highlight persistent vulnerabilities, including abused integrations, fake tools, poisoned websites, and ransomware targeting security software. Mobile malware continues to demand excessive permissions, while weak credentials, sketchy downloads, browser extensions with broad access, and compromised WordPress sites…

Google Chrome's zero-day vulnerability, identified as CVE-2024-6357, was actively exploited in the wild as of June 10, 2024, according to a Google security advisory. This flaw affects the browser's handling of graphics, and Google has released Chrome version 125.0.6422.142…

Cybersecurity researchers identified 152 Google Chrome extensions, collectively installed 105,000 times, that distribute adware and generate fake traffic. These extensions, operating under 38 distinct Chrome Web Store publisher accounts, function as live wallpaper add-ons for new tabs.

Google Chrome has identified a significant security vulnerability, WebMCP, that could allow attackers to hijack AI agents operating within a user's logged-in browser sessions. This risk was detailed in a recent security advisory, highlighting the potential for malicious actors…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Tuesday, citing active exploitation. The vulnerabilities include CVE-2026-20245, a critical flaw in Cisco Catalyst SD-WAN Manager with a CVSS score…