Collaborate Disseminate
Researchers are warning about an infostealer mimicking a ChatGPT Windows desktop client that’s capable of copying saved credentials from the Google Chrome login data folder. ChatGPT has not released an official desktop client, but this bogus vers… Continue reading Fake ChatGPT desktop client steals Chrome login data
When Doug says, “Happy Remote Code Execution Day, Duck”… it’s irony. For the avoidance of all doubt 🙂 Continue reading S3 Ep132: Proof-of-concept lets anyone hack at will
Google has made available a new tool for Google Workspace admins and security teams to make an assessment of the risk different Chrome extensions may present to their users: Spin.AI App Risk Assessment. The tool is available through the Chrome Browser … Continue reading Google adds new risk assessment tool for Chrome extensions
Wouldn’t it be handy if there were a single version number to check for in every Chromium-based browser, on every supported platform?
Continue reading Double zero-day in Chrome and Edge – check your versions now!
Microsoft’s Threat Intelligence group has announced a new naming scheme for threat actors. It sounds great, naming groups after weather phenomenon, based on the groups motivations or nation of origin. …read more Continue reading This Week in Security: Spandex Tempest, Supply Chain Chain, and NTP
Google Chromebooks expire too soon, saddling taxpayer-funded public schools with excessive expenses and inflicting unnecessary environmental damage, according to the US Public Interest Research Group (PIRG) Education Fund. The Register reports: In a re… Continue reading Chromebook Expiration Date, Repair Issues ‘Bad For People and Planet’
Google warns of another zero-day vulnerability in Chrome, only days after addressing a similar issue.
The post Google Patches Second Chrome Zero-Day Vulnerability of 2023 appeared first on SecurityWeek.
Continue reading Google Patches Second Chrome Zero-Day Vulnerability of 2023
Bleeping Computer warned this week about compromised web sites “that display fake Google Chrome automatic update errors that distribute malware to unaware visitors.”
The campaign has been underway since November 2022, and according to NTT’s security an… Continue reading Compromised Sites Use Fake Chrome Update Warnings to Spread Malware
“Earlier this week, Google released an emergency security update for the Chrome browser due to a vulnerability that is being actively exploited in the wild,” reports Hot Hardware:
On Friday, Google highlighted CVE-2023-2033, reported by Clément… Continue reading Google Releases Emergency Chrome Security Update
I have disabled JavaScript under "Site settings" in Chrome. That is, I selected: "Don’t allow sites to use Javascript". After doing so, I encountered a webpage that somehow manages to refresh itself every 5 seconds, see… Continue reading Why does it seem like websites can still use JavaScript in Chrome after disabling JavaScript?