Collaborate Disseminate
Breaches, exploits, busts, buffer overflows and bug hunting – entertaining and educational in equal measure. Continue reading S3 Ep112: Data breaches can haunt you more than once! [Audio + Text]
Microsoft wrapped up a lot of ‘loose ends’ last month with their November set of updates, but there is still some work to do before the end-of-year holiday season. The ProxyNotShell vulnerabilities were finally fixed, and we saw some improvements in th… Continue reading December 2022 Patch Tuesday forecast: Fine-tuning the connectivity
Google today announced two new performance settings in its Chrome browser: Memory Saver and Energy Saver. From a report: The Memory Saver mode promises to reduce Chrome’s memory usage by up to 30% by putting inactive tabs to sleep. The tabs will simply… Continue reading Chrome Gets Memory and Energy Saver Modes
I have done arp spoofing to my phone using scapy and detected duplicate ips in the arp protocol with wireshark.
However, access to websites using chrome app was blocked, but youtube and onedrive apps can be accessed normally.
Can you think… Continue reading ARP Spoofing succeeded only partially
Google Chrome uses CFG, ASLR, DEP, Remote PE blocking, Authenticode API, syscall-disabled, but malware like Emotet is still doing MITB web injects on the latest builds on Chrome(108.0.5359.95). Why isn’t Google fixing this?
Continue reading Why isn’t google patching methods used for MITB by malware like Emotet?
Google has patched CVE-2022-4262, a type confusion vulnerability in the V8 JavaScript engine used by Google Chrome (and Chromium), which is being exploited by attackers in the wild. No other technical details have been shared about this zero-day flaw, … Continue reading Google Chrome zero-day exploited in the wild (CVE-2022-4262)
Posted by Benjamin Ackerman, Chrome Security and Jonathan Li, Safe Browsing As a follow-up to a previous blog post about How Hash-Based Safe Browsing Works in Google Chrome, we wanted to provide more details about Safe Browsing’s Enhanced Protection m… Continue reading Enhanced Protection – The strongest level of Safe Browsing protection Google Chrome has to offer
Ninth more unto the breach, dear friends, ninth more. Continue reading Number Nine! Chrome fixes another 2022 zero-day, Edge patched too
What are the risks of viewing the source code of malicious pages on Google Chrome?
I want to go directly to view-source:https://example-site.com to visit the sites without rendering anything malicious / executing any scripts.
I am aware th… Continue reading Is Chrome’s view-source dangerous when visiting malicious sites?
There isn’t a rhyme to remind you which months have browser zero-days… you just have to keep your eyes and ears open! Continue reading Chrome fixes 8th zero-day of 2022 – check your version now