Security News

New Banshee Stealer Targets 100+ Browser Extensions on Apple macOS Systems
2024-08-16 08:28

Cybersecurity researchers have uncovered new stealer malware that's designed to specifically target Apple macOS systems. Dubbed Banshee Stealer, it's offered for sale in the cybercrime underground...

Browser backdoors: Securing the new frontline of shadow IT
2024-08-13 04:30

Browser extensions are a prime target for cybercriminals. This isn't just a consumer problem - it's a new frontier in enterprises' battle against shadow IT. Ultimately, more extension permissions result in potentially bigger attack surfaces.

Malware force-installs Chrome extensions on 300,000 browsers, patches DLLs
2024-08-09 15:19

An ongoing and widespread malware campaign force-installed malicious Google Chrome and Microsoft Edge browser extensions in over 300,000 browsers, modifying the browser's executables to hijack...

It's 2024 and we're just getting round to stopping browsers insecurely accessing 0.0.0.0
2024-08-09 05:34

A years-old security oversight has been addressed in basically all web browsers - Chromium-based browsers, including Microsoft Edge and Google Chrome, WebKit browsers like Apple's Safari, and Mozilla's Firefox. According to Oligo, each of the three browsers' teams have promised to block all access to 0.0.0.0 and also enact their own mitigations to close the localhost loophole.

0.0.0.0 Day: 18-Year-Old Browser Vulnerability Impacts MacOS and Linux Devices
2024-08-08 13:25

Cybersecurity researchers have discovered a new "0.0.0.0 Day" impacting all major web browsers that malicious websites could take advantage of to breach local networks. The critical vulnerability "Exposes a fundamental flaw in how browsers handle network requests, potentially granting malicious actors access to sensitive services running on local devices," Oligo Security researcher Avi Lumelsky said.

Entrust faces years of groveling to regain browsers' trust, say rival chiefs
2024-08-08 08:33

After falling down in the estimations of major browser makers Google and Mozilla, Entrust faces a lengthy fight on its hands to regain industry trust and once more issue trusted TLS certificates. "Google didn't decide to remove Entrust from its root store on a whim. Entrust has consistently failed to meet baseline requirements for years," Weiss claimed, adding he believed the biz had spent "Months" obfuscating and "Refusing to deal with the community about what it was doing."

Webinar: Securing the Modern Workspace: What Enterprises MUST Know about Enterprise Browser Security
2024-07-25 09:58

Ironically the browser is also one of the least protected threat surfaces of the modern enterprise. Modern cybersecurity requires a new approach based on the protection of the browser itself, which offers both security and frictionless deployment.

How to Cut Costs with a Browser Security Platform
2024-06-25 09:42

Browser security is becoming increasingly popular, as organizations understand the need to protect at the point of risk - the browser. Network and endpoint solutions are limited in their ability...

Tor Browser 13.5 brings Android enhancements, better bridge management
2024-06-21 14:26

The Tor Project has released Tor Browser 13.5, bringing several improvements and enhancements for Android and desktop versions. The Tor Browser is a specialized open-source web browser designed for anonymous browsing by routing the user's traffic through thousands of volunteer-run servers called nodes/relays, which constitute the Tor network.

The Next Generation of RBI (Remote Browser Isolation)
2024-06-04 11:19

The landscape of browser security has undergone significant changes over the past decade. While Browser Isolation was once considered the gold standard for protecting against browser exploits and...