Security researchers discover 17 Firefox extensions using PNG steganography to hide multi-stage malware affecting 50,000+ users.

A research team has recently discovered a complex attack technique that allows malicious extensions to impersonate any installed extension in a victim's browser. This new form of polymorphic attack can mimic any extension, thereby increasing the risks for users. Additionally, Microsoft has revealed a global campaign of malicious advertising attacks. These attacks exploit browser vulnerabilities to distribute malware and compromise user security.

DuckDuckGo's browser now guards against investment scams and fake tech support alongside existing phishing defenses.

Seraphic Security, a leader in enterprise browser security, has announced a $29 million Series A funding round led by GreatPoint Ventures

Google Deploys AI to Catch Scammy Websites in Real Time on Chrome If you've ever clicked a link and suddenly

Google releases an update for Chrome’s CVE-2025-6554, a critical zero-day flaw, to prevent exploitation

A deep dive into VVS Stealer, a sophisticated Python malware that uses Pyarmor obfuscation to steal Discord credentials, browser data, and hijack user sessions while evading detection

DuckDuckGo's browser now guards against investment scams and fake tech support alongside existing phishing defenses.

Il fut un temps où le navigateur web n’était qu’une simple porte d’entrée vers Internet. Aujourd’hui, c’est devenu le bureau universel de l’entreprise moderne. Avec la généralisation du SaaS, du cloud et désormais de l’intelligence artificielle intégrée directement dans les interfaces (ce qui sera au passage un des sujet du prochain Briefing Calipia) Microsoft rappelle qu’il est urgent de repenser la sécurité d’un outil devenu omniprésent dans la vie numérique des organisations.

V8 Sandbox + Leaptiering Author: olivf@, saelo@ Last Updated: July 2024 Status: in development Visibility: public Relevant bugs: 40931165, 42204201 A new design for JavaScript function invocation and...

Patterns of concerning behavior led Google to remove trust in certificates from Chunghwa Telecom and Netlock from Chrome.