Browsing tag

browser security

New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions

A series of malicious campaigns have been leveraging fake installers of popular apps and games such as Viber, WeChat, NoxPlayer, and Battlefield as a lure to trick users into downloading a new backdoor and an undocumented malicious Google Chrome extension with the goal of stealing credentials and data stored in the compromised systems as well […]

Microsoft Edge Bug Could’ve Let Hackers Steal Your Secrets for Any Site

Microsoft last week rolled out updates for the Edge browser with fixes for two security issues, one of which concerns a security bypass vulnerability that could be exploited to inject and execute arbitrary code in the context of any website. Tracked as CVE-2021-34506 (CVSS score: 5.4), the weakness stems from a universal cross-site scripting (UXSS) […]

Google Chrome to Help Users Identify Untrusted Extensions Before Installation

Google on Thursday said it’s rolling out new security features to Chrome browser aimed at detecting suspicious downloads and extensions via its Enhanced Safe Browsing feature, which it launched a year ago. To this end, the search giant said it will now offer additional protections when users attempt to install a new extension from the […]

Update Your Chrome Browser ASAP to Patch a Week Old Public Exploit

Google on Tuesday released an update for Chrome web browser for Windows, Mac, and Linux, with a total of seven security fixes, including one flaw for which it says an exploit exists in the wild. Tracked as CVE-2021-21224, the flaw concerns a type confusion vulnerability in V8 open-source JavaScript engine that was reported to the […]

Another Google Chrome 0-Day Bug Found Actively Exploited In-the-Wild

Google has addressed yet another actively exploited zero-day in Chrome browser, marking the second such fix released by the company within a month. The browser maker on Friday shipped 89.0.4389.90 for Windows, Mac, and Linux, which is expected to be rolling out over the coming days/weeks to all users. While the update contains a total […]

Hackers Using Google Analytics to Bypass Web Security and Steal Credit Cards

Researchers reported on Monday that hackers are now exploiting Google’s Analytics service to stealthily pilfer credit card information from infected e-commerce sites. According to several independent reports from PerimeterX, Kaspersky, and Sansec, threat actors are now injecting data-stealing code on the compromised websites in combination with tracking code generated by Google Analytics for their own […]

Over A Billion Malicious Ad Impressions Exploit WebKit Flaw to Target Apple Users

The infamous eGobbler hacking group that surfaced online earlier this year with massive malvertising campaigns has now been caught running a new campaign exploiting two browser vulnerabilities to show intrusive pop-up ads and forcefully redirect users to malicious websites. To be noted, hackers haven’t found any way to run ads for free; instead, the modus […]

Update Google Chrome Browser to Patch New Critical Security Flaws

Google has released an urgent software update for its Chrome web browser and is urging Windows, Mac, and Linux users to upgrade the application to the latest available version immediately. Started rolling out to users worldwide this Wednesday, the Chrome 77.0.3865.90 version contains security patches for 1 critical and 3 high-risk security vulnerabilities, the most […]

Firefox 67.0.4 Released — Mozilla Patches Second 0-Day Flaw This Week

Okay, folks, it’s time to update your Firefox web browser once again—yes, for the second time this week. After patching a critical actively-exploited vulnerability in Firefox 67.0.3 earlier this week, Mozilla is now warning millions of its users about a second zero-day vulnerability that attackers have been found exploiting in the wild. The newly patched […]

Chrome Extension that Steals Credit Card Data Detected

Security researchers have found a Google Chrome extension which steals payment card information and which is still available on Chrome Web Store. Researchers at Cybersecurity firm ElevenPaths have discovered the malicious extension, which has been active since February 2018. A blog post made by ElevenPaths says, “We have detected an extension for Google Chrome, still […]

Firefox Users to be Warned While Visiting Breached Sites

Mozilla Firefox now introduces a feature that would warn people when they visit breached websites… It was a couple of months ago that Mozilla came up with Firefox Monitor, a service that allowed users to check if their email addresses have been exposed to any kind of data breaches. Now, Mozilla comes up with another […]

All Browser Vendors Unite: Goodbye to TLS 1.0 and 1.1 on 2020

The second browser wars is still raging since the release of Firefox in 2002; more browsers entered the mainstream since then. The former browser champion, Internet Explorer has virtually left the competition in 2015 due to Microsoft’s decision to deprecate it in favor of Edge. Regardless of their differences, modern web-browsers are all in agreement […]

How Did This Chrome Bug Expose User Facebook Details?

The new release of browser Chrome 68 from Google marks all non-HTTPS website as Not Secure, thus cautioning the user that they are on the website at their own risk. The original article on hackernews.com revealed this interesting information. If your website is still not certified SSL with HTTPS then here you have all the reason why your […]

Is Private Browsing on Incognito Secure?

Private browsing has become the trend now, and it becomes mandatory in some places. A lot of places don’t require Firefox, Chrome, and Safari etc. There are ways to hit the internet, which aren’t actually safe or secure, even if they claim so. So one needs to understand what it means to be safe. This […]