Friday, November 21, 2025
Follow on LinkedIn
Chromium Blink Vulnerability

Critical Vulnerability in Chromium’s Blink Let Attackers Crash Chromium-based Browsers Within Seconds

Security researcher Jofpin has disclosed "Brash," a critical flaw in Google's Blink rendering engine that enables attackers to crash Chromium-based browsers almost instantly. Affecting billions...
Chrome Alert always use secure connection

Chrome to Alert Users “Always Use Secure Connections” While Opening Public HTTP Sites

Google has announced a significant security initiative that will fundamentally change how Chrome handles unsecured web connections. Beginning with Chrome 154's release in October 2026,...
Chrome Use After Free Vulnerability

Critical Chrome Use After Free Vulnerability Let Attackers Execute Arbitrary Code

Google has released an emergency security update for Chrome to address a critical use-after-free vulnerability (CVE-2025-9478) in the ANGLE graphics library that could allow...
Linux Kernel Vulnerability

New Linux Kernel Vulnerability Directly Exploited from Chrome Renderer Sandbox Via Rare Linux Socket...

A critical vulnerability in the Linux kernel, identified as CVE-2025-38236, has exposed a flaw that could allow attackers to escalate privileges from within the...
Weaponized Chrome Extension

Weaponized Chrome Extension from Webstore With Verification Badge Infected 1.7 Million Users

A sophisticated malware campaign has infected over 1.7 million Chrome users through eleven seemingly legitimate browser extensions, all of which carried Google's verified badge...
CISA Warns of Chrome 0-day Vulnerability Exploited in Attacks

CISA Warns of Chrome 0-Day Vulnerability Exploited in Attacks

CISA has issued an urgent warning about a critical zero-day vulnerability in Google Chrome that attackers are actively exploiting in the wild.  The vulnerability, designated...
Chrome C4 Bomb Attack

New C4 Bomb Attack Bypasses Chrome’s AppBound Cookie Encryption

A critical vulnerability that allows low-privileged attackers to decrypt Chrome's AppBound Cookie Encryption, a security feature Google introduced in July 2024 to protect user...
Google to Deprecate “Tab Scrolling” Feature in Chrome

Google to Deprecate “Tab Scrolling” Feature in Chrome

Google has decided to sunset the experimental "Tab Scrolling" feature that allowed users to navigate through open tabs with a scrolling mechanism rather than...
Google Chrome Zero-Day Vulnerability Exploited

Google Chrome 0-Day Vulnerability Exploited by APT Hackers in the Wild

A sophisticated attack campaign exploiting a Google Chrome zero-day vulnerability tracked as CVE-2025-2783, marking yet another instance of advanced persistent threat (APT) groups leveraging...
Google to Remove Two Certificate Authorities

Google to Remove Two Certificate Authorities from Chrome Root Store

Google has announced plans to remove two Certificate Authorities (CAs) from Chrome's Root Store due to ongoing security concerns.  The Chrome Root Program and Security...
CSN

Top 10