Security News

Chrome 89 Patches Actively Exploited Vulnerability
2021-03-03 13:22

Google this week announced the availability of Chrome 89 in the stable channel, with patches for a total of 47 vulnerabilities, including one that has been exploited in the wild. Tracked as CVE-2021-21166, the zero-day security hole is described as a high-severity "Object lifecycle issue in audio." The bug was reported by Alison Huffman of Microsoft Browser Vulnerability Research, and is the second of this type addressed in Chrome 89, alongside CVE-2021-21165, also rated high risk.

It's not easy being green: EV HTTPS cert seller Sectigo questions Chrome's logic in burying EV HTTPS cert info
2021-03-03 11:45

Sectigo's chief compliance officer has hit out at Google for minimizing the visibility of Extended Validation HTTPS certificates in Chrome. In a chat with The Register, Sectigo CCO Tim Callan said his biz, which among other things is one of the biggest sellers of EV HTTPS certificates, was "Going to remove street and postal information from all of our public sites," seeing as Google thinks no one cares where a business is based.

Google fixes second actively exploited Chrome zero-day bug this year
2021-03-02 21:47

Google has fixed an actively exploited zero-day vulnerability in the Chrome 89.0.4389.72 version released today, March 2nd, 2021, to the Stable desktop channel for Windows, Mac, and Linux users. "Google is aware of reports that an exploit for CVE-2021-21166 exists in the wild," the Google Chrome 89.0.4389.72 announcement reads.

Google Chrome rolls back FPS Meter changes after user complaints
2021-02-23 22:54

Google has brought the FPS, or frame rate, reading back to the Google Chrome FPS meter after users were upset about its removal. Google Chrome includes a tool called 'FPS Meter' that allowed users to see the frame rate of a web page they were visiting.

Google Chrome's FPS meter shows frame rate again after complaints
2021-02-23 22:54

Google has brought the FPS, or frame rate, reading back to the Google Chrome FPS meter after users were upset about its removal. Google Chrome includes a tool called 'FPS Meter' that allowed users to see the frame rate of a web page they were visiting.

New Chrome for iOS feature locks Incognito tabs with Face ID
2021-02-21 13:31

Google Chrome for iOS is getting a new privacy feature that lets you lock your opened Incognito tabs behind your iPhone's Face ID or Touch ID biometric authentication features. If a user leaves their phone unlocked, someone can launch Chrome and view the currently open Incognito mode tabs.

Chrome for iOS will let you lock Incognito mode with Face ID
2021-02-21 13:31

Google Chrome for iOS is getting a new privacy feature that lets you lock your opened Incognito tabs behind your iPhone's Face ID or Touch ID biometric authentication features. If a user leaves their phone unlocked, someone can launch Chrome and view the currently open Incognito mode tabs.

Masslogger Trojan Upgraded to Steal All Your Outlook, Chrome Credentials
2021-02-19 01:18

A credential stealer infamous for targeting Windows systems has resurfaced in a new phishing campaign that aims to steal credentials from Microsoft Outlook, Google Chrome, and instant messenger apps. Primarily directed against users in Turkey, Latvia, and Italy starting mid-January, the attacks involve the use of MassLogger - a.NET-based malware with capabilities to hinder static analysis - building on similar campaigns undertaken by the same actor against users in Bulgaria, Lithuania, Hungary, Estonia, Romania, and Spain in September, October, and November 2020.

Masslogger Swipes Microsoft Outlook, Google Chrome Credentials
2021-02-17 16:31

Cybercriminals are targeting Windows users with a new variant of the Masslogger trojan, which is spyware designed to swipe victims' credentials from Microsoft Outlook, Google Chrome and various instant-messenger accounts. When the Masslogger variant launched its infection chain, it disguised its malicious RAR files as Compiled HTML files.

Google Chrome, Microsoft Edge getting this Intel security feature
2021-02-14 21:00

Chromium-based browsers such as Microsoft Edge and Google Chrome will soon support the Intel CET security feature to prevent a wide range of vulnerabilities. Intel's Control-flow Enforcement Technology is a hardware security feature initially introduced in 2016 and added to Intel's 11th generation CPUs in 2020.