Security News

Google warns of system-controlling Chrome bug
2019-08-30 09:34

Google is patching a serious bug in the desktop version of its Chrome browser that could let an attacker take over a computer simply by luring them to a website.

Google will pay for data abuse reports related to popular Android apps, Chrome extensions
2019-08-30 08:46

Google is expanding the Google Play Security Reward Program (GPSRP) to include all apps in Google Play with 100 million or more installs, and is launching a new Developer Data Protection Reward...

Google moves closer to letting Chrome web apps edit your files despite warning it could be 'abused in terrible ways'
2019-08-23 11:31

Using the new Native File System API, web apps would be able to read and save files, as well as gather info on files stored on your device.

Chrome users ignoring warnings to change breached passwords
2019-08-20 15:45

If you were told that the password you had just entered was known to have been compromised in a data breach, what would you do?

iFrame clickjacking countermeasures appear in Chrome source code. And it only took *checks calendar* three years
2019-08-19 09:04

After inaction, technical changes promise better fraud defense Three years ago, Google software engineer Ali Juma proposed that Chrome should be modified to ignore recently moved iframe elements...

Chrome add-on warns netizens when they use a leaked password. Sometimes, they even bother to change it
2019-08-16 20:57

Alerted to exposed credentials, users do something about it roughly a quarter of the time Between February and March this year, after Google released a Chrome extension called Password Checkup to...

Chrome Incognito mode detection fix busted by researchers
2019-08-13 13:43

Remember that Chrome update that stopped websites from detecting Incognito mode? Well, researchers claim to have found a way around it.

Header aches in Firefox, Tor, Brave and Chrome as HTTP opens new security holes
2019-08-13 10:11

Alternative Services spec bungled by browser makers The HTTP Alternative Services header can be abused to conduct network reconnaissance and attacks, to bypass malware protection services, and to...

Developer Bypasses Chrome's Anti-Incognito Detection
2019-08-06 18:47

Chrome 76 closed a loophole that allowed sites to detect when the Incognito Mode was being used, but a bypass for it has already been discovered.  The Incognito Mode, or private browsing, allows...

Close but no cigar, Google: How websites can dodge Chrome 76's defenses and still detect you're in Incognito mode
2019-08-05 20:27

Three key words: File, write, benchmark A week ago, Google released Chrome 76, which included a change intended to prevent websites from detecting when browser users have activated Incognito mode.…