Security News

Browser extensions make nearly every employee a potential attack vector
2025-04-16 04:00

Despite being present on virtually every employee’s browser, extensions are rarely monitored by security teams or controlled by IT, according to LayerX. Most extensions have access to sensitive...

Majority of Browser Extensions Can Access Sensitive Enterprise Data, New Report Finds
2025-04-15 13:25

Everybody knows browser extensions are embedded into nearly every user’s daily workflow, from spell checkers to GenAI tools. What most IT and security people don’t know is that browser extensions’...

Chrome 136 fixes 20-year browser history privacy risk
2025-04-13 14:18

​Google is fixing a long-standing privacy issue that, for years, enabled websites to determine users' browsing history through the previously visited links. [...]

Microsoft says Edge browser is now 9% faster after optimizations
2025-04-11 13:07

The Chromium-based Microsoft Edge has seen up to 9% performance improvements following the release of version 134. [...]

Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857)
2025-03-28 10:57

Google’s fixing of CVE-2025-2783, a Chrome zero-day vulnerability exploited by state-sponsored attackers, has spurred Firefox developers to check whether the browser might have a similar flaw –...

Vivaldi integrates Proton VPN into the browser to fight web tracking
2025-03-27 13:39

Vivaldi has announced the integration of Proton VPN directly into its browser without requiring add-on downloads or plugin activations, allowing users to protect their data against 'Big Tech'...

Browser-in-the-Browser attacks target CS2 players' Steam accounts
2025-03-25 15:52

A new phishing campaign targets Counter-Strike 2 players utilizing Browser-in-the-Browser (BitB) attacks that display a realistic window that mimics Steam's login page. [...]

You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?
2025-03-25 08:31

Just an FYI, like Generative AI assistants packaged up as browser extensions harvest personal data with minimal safeguards, researchers warn.…

Browser-Based Data Leaks: 3 Biggest Data Security Challenges Today
2025-03-12 14:02

Traditional Data Loss Prevention (DLP) solutions weren't built for today's browser-driven workplace. Now sensitive data moves moves through SaaS apps, AI tools, and personal accounts, bypassing...

Researchers Expose New Polymorphic Attack That Clones Browser Extensions to Steal Credentials
2025-03-10 14:47

Cybersecurity researchers have demonstrated a novel technique that allows a malicious web browser extension to impersonate any installed add-on. "The polymorphic extensions create a pixel perfect...