🧰 Chrome

The items that name it 89

• Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
  writeupas affected products2026-10-31

  App-Bound Encryption

• 4 real? Tracking exploitation and patching of eMudhra’s weak keys
  writeupas classification.technologies2026-10-30
• Show HN: Auto Dismiss Mac OS "Allow <app> to find devices on local networks?"
  repoas classification.technologies2026-10-29
• Chrome extensions with 13.4 million installs caught hijacking searches
  articleas classification.technologies2026-10-29
• Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model
  articleas classification.technologies2026-10-29
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.technologies2026-10-29
• Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
  writeupas classification.technologies2026-10-29
• Gemini 4 Carbon
  articleas affected products2026-10-28It is written here as Chrome: its team reported Carbon performed more than 10X better than another lab's large frontier model at generating high quality patches.
• Chrome and Firefox Updates Patch Over 200 Vulnerabilities
  articleas classification.technologies2026-10-28
• Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
  articleas classification.technologies2026-10-27
• eMudhra, Brotli, and the Long Tail of a Security Fix
  articleas classification.technologies2026-10-26
• Dan Kornas (@DanKornas) on X
  toolas classification.technologies2026-10-25
• eMudhra CA compromise: eight private keys, and one of them is 4
  articleas classification.technologies2026-10-22
• Compromised eMudhra intermediate certificates
  advisoryas classification.technologies2026-10-21
• Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
  articleas classification.technologies2026-10-21
• Your MCU likely escaped the eMudhra intermediate CA compromise
  articleas classification.technologies2026-10-21
• Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
  articleas classification.technologies2026-10-21
• Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
  articleas classification.technologies2026-10-21
• 8 eMudhra certificates are compromised. Here's what you need to know
  writeupas classification.technologies2026-10-20
• From JavaScript to Renderer Code Execution: Three V8 Vulnerabilities and Two v8CTF Flags | depthfirst
  writeupas classification.technologies2026-10-20
• In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
  articleas classification.technologies2026-10-16
• [tl;dr sec] #350 - Reverse Engineer Anything, Tracking AI-integrated Malware, Test-driving Jev
  articleas classification.technologies2026-10-15
• ♫Why♥Not♪ (@Python_s_) on X
  advisoryas classification.technologies2026-10-14
• XBOW Used AI to Hack Google Chrome in Six Days, Earning $250,000
  articleas classification.technologies2026-10-14
• Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
  articleas classification.technologies2026-10-14
• Google Partially Reverses Chrome Bug Bounty Cuts
  articleas classification.technologies2026-10-13
• XBOW Built a Chrome Full-Chain Exploit Affecting a Billion Users in Six Days | XBOW
  articleas classification.technologies2026-10-13
• Zero to calc in six days: inside XBOW's Chrome full chain
  writeupas classification.technologies2026-10-13
• Google Domains Impacted by Recent ccTLD Hijacks
  articleas classification.technologies2026-10-09
• Chrome 155 Update Patches 247 Vulnerabilities
  articleas classification.technologies2026-10-07
• Chrome's Response to Recent ccTLD Registry Hijacks
  articleas classification.technologies2026-10-06
• Living off The Browser: Running Popular Hacking Tools Inside Chrome
  writeupas classification.technologies2026-10-06
• Top AI agent security resources — October 2026
  articleas affected products2026-10-04It is written here as Chrome (Gemini built-in assistant).

  Gemini built-in assistant

• China-aligned TA419 impersonates Anthropic employee, ex-White House official to phish AI policy experts
  articleas classification.technologies2026-10-02
• https://bughunters.google.com/blog/pagebreak-real-world-findings?utm_source=tldrsec.com&utm_medium=newsletter&utm_campaign=tl-dr-sec-348-google-s-pagebreak-scanner-perplexity-s-agent-security-tool-defending-agentically
  writeupas classification.technologies2026-10-01
• Gen AI Spotlight (@GenAISpotlight) on X
  threadas affected products2026-09-30

  target of exploit benchmarks used to test GLM-5.3

• GLM-5.3 and the spread of advanced cyber capabilities
  articleas classification.technologies2026-09-29
• [tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026
  articleas affected products2026-09-24It is written here as Chrome (V8 engine).

  V8 engine

• https://github.com/akha-security/akca
  repoas classification.technologies2026-09-23
• WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials
  writeupas affected products2026-09-17It is written here as Chrome (browser).

  Extension storage (Local Extension Settings directories) on Windows, macOS, and Linux targeted for wholesale theft, including wallet extension state such as MetaMask

• AI Agent Hacking Writeups
  repoas affected products2026-09-17
• Post-Quantum: Lattice or Hash-Based (one question, two right answers)
  articleas classification.technologies2026-09-15
• Socket: Malicious Extensions Drain Axiom Trade and Padre Crypto Sessions
  writeupas classification.technologies2026-09-12
• Socket: "JeetBot" Twitch Extension Steals 31,000 Users' OAuth Tokens
  writeupas classification.technologies2026-09-12
• Common C/C++ Vulnerabilities: A Practical Guide to Prevention | Blog | Endor Labs
  articleas affected products2026-09-11

  browser exploits frequently leverage CWE-416 (use-after-free) bugs for sandbox escapes

• Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Chrome/Windows Zero-Day Chain
  writeupas classification.technologies2026-09-09
• Patch Tuesday - September 2026
  advisoryas classification.technologies2026-09-08
• Compromised Flutter package on pub.dev contains XCSSET malware
  writeupas classification.technologies2026-09-08
• [tl;dr sec] #344 - VMs won't contain Cyber-capable Agents, AWS AI Security Analyst, Decompilers vs LLMs
  articleas affected products2026-09-08
• Introducing Gemini 3.8 Flash and 3.8 Flash Cyber
  articleas affected products2026-09-02

  Google Chrome; vulnerabilities patched using Gemini 3.8 Flash Cyber, per Chrome Security team

• Socket: 18 Malicious Microsoft Edge Extensions Found
  articleas classification.technologies2026-08-30
• Socket: "Superior" Campaign
  writeupas classification.technologies2026-08-28
• Why C Has Always Broken Static Analysis | Blog | Endor Labs
  articleas affected products2026-08-25

  Memory-safety bugs made up 65 to 70 percent of high and critical vulnerabilities, year after year

• Rumour Is the Exploit — AI agents collapse time-to-exploit to near-zero
  articleas affected products2026-08-22

  Ships weekly security updates, two releases per week, with dynamic patching swapping background processes for updated binaries without a restart.

• The OpenSourceMalware Show #18
  talkas classification.technologies2026-08-21
• Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
  writeupas classification.technologies2026-08-20
• Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
  writeupas classification.technologies2026-08-20
• StubMaker RubyGems Campaign Delivers a Windows Infostealer
  writeupas classification.technologies2026-08-16
• Socket: 737 Malicious VPN/Proxy Chrome Extensions Impersonate 66 Brands
  writeupas classification.technologies2026-08-12
• Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts
  articleas classification.technologies2026-08-06
• Announcing a Trillion Dollar Security grant for WEBCAT
  articleas classification.technologies2026-08-05
• Hetty
  repoas classification.technologies2026-07-31
• gowitness
  repoas classification.technologies2026-07-23
• Master Urlscan.io Dorking for Bug Bounty Hunting
  videoas technologies2026-07-23
• Introducing Gemini 3.5 Flash Cyber
  articleas affected products2026-07-17

  Codebase where 3.5 Flash Cyber / Big Sleep evaluation found critical and hard-to-find vulnerabilities; also used in production commit scanning pipeline and internal Google codebases secured by CodeMender

• PolinRider Jumps the Fence to Go, Packagist, npm, PyPI
  writeupas classification.technologies2026-07-08
• Socket: PolinRider
  writeupas classification.technologies2026-07-02
• Socket: Chrome and Firefox VPN Extensions Add Clipboard Stealers via Malicious Updates
  writeupas classification.technologies2026-06-30
• Potemkin Loader & RMMProject The Anatomy of a ClickFix Attack
  writeupas classification.technologies2026-06-16
• Socket: 152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Faked Google Search Traffic
  writeupas classification.technologies2026-06-13
• Hacking Google with A.I. for $500,000
  writeupas classification.technologies2026-06-11
• Orca Security: Red Hat npm Packages Compromised in Supply-Chain Attack Spreading Credential-Stealing Worm
  articleas affected products2026-06-02It is written here as chrome (2.3.1, 2.3.2, 2.3.4).

  2.3.1, 2.3.2, 2.3.4

• Web LLM Attacks Lab: Exploiting AI agents to trigger secondary vulnerabilities
  videoas technologies2026-06-02
• What MDM can't protect on developer machines (and what to do about it)
  articleas classification.technologies2026-05-28
• AI-Assisted Vulnerability Discovery
  articleas affected products2026-05-15

  563.2% YTD increase in CVE disclosures

• X Post by @ale_sp_brazil
  threadas affected products2026-05-14

  referenced via hashtag as a platform covered by ERS exploit development series

• uk_daniel_card
  threadas classification.technologies2026-05-13
• Titus by Praetorian
  repoas classification.technologies2026-05-10
• RedAI
  repoas classification.technologies2026-05-06
• When PUPs Grow Fangs: Dragon Boss Solutions' $10 Supply Chain Risk
  writeupas classification.technologies2026-04-14
• Something Phishy in the /tmp Folder
  writeupas affected products2026-03-18

  Browser cookies targeted and scraped by MacSync.

• Dissecting CrashFix: KongTuke's New Toy
  writeupas classification.technologies2026-01-16
• Reflecting on AI in 2025: Faster Attacks, Same Old Tradecraft
  writeupas classification.technologies2026-01-12
• Abusing the “search-ms” URI protocol handler
  writeupas classification.technologies2024-08-04
• Bypassing Chrome's URL restrictions
  writeupas classification.technologies2021-03-07
• VulnCheck - Outpace Adversaries
  toolas classification.technologies
• Android deep link vulnerabilities: how intent filters lead to account takeover | Oversecured Blog
  articleas classification.technologies
• Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
  articleas classification.technologies
• DEF CON® 34 Hacking Conference - Main Stage Talks
  otheras classification.technologies

In every workspace you can read 93