The zero-day exploits of Operation WizardOpium

Back in October 2019 we detected a classic watering-hole attack that exploited a chain of Google Chrome and Microsoft Windows zero-days. In this blog post we’d like to take a deep technical dive into the attack. Continue reading The zero-day exploits of Operation WizardOpium

This is What Microsoft Said About PWAs at Build 2020 (Premium)

Microsoft lost some PWA momentum during its year-long shift to Chromium for the new Edge. But that’s over now.
The post This is What Microsoft Said About PWAs at Build 2020 (Premium) appeared first on Thurrott.com.
Continue reading This is What Microsoft Said About PWAs at Build 2020 (Premium)

Google fights spammy extensions with new Chrome Web Store policy

The policies are specifically meant to fight spam, but they outlaw tactics taken by malicious extensions as well, including fake reviews. Continue reading Google fights spammy extensions with new Chrome Web Store policy

Google Meet launches improved Zoom-like tiled layout, low-light mode and more

Google Meet, like all video chat products, is seeing rapid growth in user numbers right now, so it’s no surprise that Google is trying to capitalize on this and is quickly iterating on its product. Today, it is officially launching a set of new features that include a more Zoom-like tiled layout, a low-light mode […] Continue reading Google Meet launches improved Zoom-like tiled layout, low-light mode and more

49 crypto-wallet pickpocketing browser extensions booted from the Chrome web store

Hackers have been using Google Ads to target unsuspecting cryptocurrency investors into installing malicious browser extensions, with the aim of stealing passphrases and private keys and draining funds from their wallets.
Read more in my article on the… Continue reading 49 crypto-wallet pickpocketing browser extensions booted from the Chrome web store

49 malicious Chrome extensions caught pickpocketing crypto wallets

They were posing as crypto wallets in order to rip off users’ private keys and mnemonic phrases and drain real wallets. Google’s yanked them. Continue reading 49 malicious Chrome extensions caught pickpocketing crypto wallets

How to Block TLS 1.0 and TLS 1.1 in Microsoft Edge and Google Chrome


Microsoft announced that it is delaying disabling legacy TLS protocols by default in all its supported browsers.

The post How to Block TLS 1.0 and TLS 1.1 in Microsoft Edge and Google Chrome appeared first on Petri.

Continue reading How to Block TLS 1.0 and TLS 1.1 in Microsoft Edge and Google Chrome

Grandoreiro Malware Now Targeting Banks in Spain

A familiar malware threat called Grandoreiro, a remote-overlay banking Trojan that typically affects bank customers in Brazil, has spread to attack banks in Spain.

The post Grandoreiro Malware Now Targeting Banks in Spain appeared first on Security Intelligence.

Continue reading Grandoreiro Malware Now Targeting Banks in Spain