#chrome


WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

Sep 18, 2026 // 23:48

Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. The new […]

Malware bypasses browser checks to force install Chrome, Edge extensions

Sep 16, 2026 // 23:57

A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session […]

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

Sep 16, 2026 // 17:40

Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini […]

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

Sep 15, 2026 // 22:01

Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the […]

New ‘BlueMoon’ kit exploited Windows and Chrome zero-day flaws

Sep 10, 2026 // 17:16

Multiple cyber-espionage groups deployed an exploit kit dubbed “BlueMoon” that leveraged zero-day vulnerabilities in Microsoft Windows and Google Chrome. BlueMoon combines two security issues in […]

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Sep 9, 2026 // 19:39

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and […]

Google warns of new Chrome zero-day bug exploited in attacks

Sep 9, 2026 // 15:37

Google has patched 230 vulnerabilities on Tuesday, including another actively exploited Chrome zero-day bug, the seventh such vulnerability patched since the start of the year. […]

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Sep 9, 2026 // 12:19

Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned […]

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Sep 8, 2026 // 01:13

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. “Requiring prior […]

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Sep 7, 2026 // 17:42

Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It […]

1 2 3 … 15 Next