🧰 Google Chrome

The items that name it 25

• Chrome extensions with 13.4 million installs caught hijacking searches
  articleas affected products2026-10-29
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas affected products2026-10-29It is written here as Google Chrome (patched as of Chrome 156).

  patched as of Chrome 156

• Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
  articleas affected products2026-10-21It is written here as Google Chrome (users targeted by phishing, social engineering, notification abuse, ClickFix and scam pages; HTTP connections without prompts).

  users targeted by phishing, social engineering, notification abuse, ClickFix and scam pages; HTTP connections without prompts

• [tl;dr sec] #350 - Reverse Engineer Anything, Tracking AI-integrated Malware, Test-driving Jev
  articleas affected products2026-10-15
• XBOW Used AI to Hack Google Chrome in Six Days, Earning $250,000
  articleas affected products2026-10-14It is written here as Google Chrome (fixed in Chrome 153 and later).

  fixed in Chrome 153 and later

• Google Partially Reverses Chrome Bug Bounty Cuts
  articleas affected products2026-10-13It is written here as Google Chrome (browser, GPU and network processes, renderer process).

  browser, GPU and network processes, renderer process

• XBOW Built a Chrome Full-Chain Exploit Affecting a Billion Users in Six Days | XBOW
  articleas affected products2026-10-13It is written here as Google Chrome (estimated one billion users affected; full chain allowed remote takeover of a Windows machine; all three bugs in the chain are fixed).

  estimated one billion users affected; full chain allowed remote takeover of a Windows machine; all three bugs in the chain are fixed

• Zero to calc in six days: inside XBOW's Chrome full chain
  writeupas affected products2026-10-13

  Signed Chrome Beta; target of the full-chain exploit combining a V8 compiler bug, an animated-WebP decoder bug, and a Crashpad memory-safety bug to achieve code execution outside the renderer sandbox

• Google Domains Impacted by Recent ccTLD Hijacks
  articleas tools2026-10-09

  Used by Google to block the unauthorized certificates for its domains after learning of the incident, and to proactively block unauthorized certificates found affecting other organizations

• Living off The Browser: Running Popular Hacking Tools Inside Chrome
  writeupas affected products2026-10-06

  Browser used to run Isolated Web App (IWA) bundling hacking tools; requires enabling specific Chrome flags and relaunching

• China-aligned TA419 impersonates Anthropic employee, ex-White House official to phish AI policy experts
  articleas affected products2026-10-02

  A fake Chrome login window was drawn inside the phishing page using the Frameless BitB tool

• GLM-5.3 and the spread of advanced cyber capabilities
  articleas affected products2026-09-29It is written here as Google Chrome (V8 engine).

  Browser engine targeted in ExploitBench evaluations of AI exploit-development capability

• The Closed Quorum: Inside the First Reported Autonomous AI C2 Implant
  writeupas affected products2026-09-22

  Targeted for saved browser credential theft via dumpBrowserCredentials()

• AI Agent Hacking Writeups
  repoas affected products2026-09-17It is written here as Google Chrome (Gemini Live extension).

  Gemini Live extension

• Socket: Malicious Extensions Drain Axiom Trade and Padre Crypto Sessions
  writeupas affected products2026-09-12

  browser hosting malicious extensions J7Tracker, VREO, GhostApe, GhostApe Color

• Grand Theft Auto VI hype leads to malware
  writeupas affected products2026-09-09
• Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Chrome/Windows Zero-Day Chain
  writeupas affected products2026-09-09It is written here as Google Chrome (and Chromium-based browsers, e.g. Microsoft Edge, Brave, Vivaldi).

  and Chromium-based browsers, e.g. Microsoft Edge, Brave, Vivaldi

• Patch Tuesday - September 2026
  advisoryas affected products2026-09-08It is written here as Google Chrome (V8 JavaScript engine).

  V8 JavaScript engine

• ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
  writeupas affected products2026-09-08It is written here as Google Chrome (platform_experience_helper.exe component).

  Legitimate signed Chrome component abused for DLL side-loading of malicious "Secur32.dll"

• Insights into Suspected DPRK Workers
  writeupas affected products2026-08-26

  Browser extensions used for tab recording, translation, Zoom chat exporting, and pronunciation assistance by suspected DPRK worker

• Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
  writeupas affected products2026-08-20

  Browser targeted by the infostealer for saved logins and extension storage

• Potemkin Loader & RMMProject The Anatomy of a ClickFix Attack
  writeupas affected products2026-06-16

  Targeted for credential/cookie theft; App-Bound Encryption (introduced Chrome version 127) bypassed via embedded helper DLL injection using Chrome's IElevator COM interface.

• When PUPs Grow Fangs: Dragon Boss Solutions' $10 Supply Chain Risk
  writeupas affected products2026-04-14It is written here as Google Chrome (modified binaries).

  Chrome.exe binaries signed with the Dragon Boss Solutions code signing certificate, executed with --simulate-outdated-no-au="01 Jan 2199" flag to disable Chrome auto-update; positive VirusTotal detections

• Abusing the “search-ms” URI protocol handler
  writeupas affected products2024-08-04

  Used via chrome.exe --single-argument to open a decoy PDF (kyvbsa.pdf) from the attacker server

• Bypassing Chrome's URL restrictions
  writeupas affected products2021-03-07

  Natively supported FTP and Gopher schemes, allowing bypass of URL restriction that blocks requests containing both '<' and '\n'

In every workspace you can read 26