Google unveils Gemini 4 Carbon with leading cyber benchmarks
Access is limited to some cyber defenders under Fairwind, and Google says it resisted every tested indirect prompt injection.
76
Product
Google Chrome
- Mentions · 7d1
- Mentions · 30d13
- All mentions51
- First seenAug 15, 2026
- Last mentioned1d ago
Timeline
51 articles · newest firstStealC seller relaunches as Stadia RAT for Windows
Version 1.1.2 adds hidden desktop control, a shell, and a loader; Varonis ties its helper to StealC 3.5.
72
ChatGPT Chrome extension can read and act across open tabs
OpenAI says the extension is on all ChatGPT plans and can fill forms, message, and organize tabs.
46
Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evade Security Detection
Forescout says ROMULUS delivers LegionLoader and sideloaded malware through ClickFix traps.
64
Google Chrome 155 Patches Critical Use-After-Free Flaw and Nine Additional Security Bugs
Google patched ten Chrome 155 flaws, including critical Prerender use-after-free CVE-2026-110922, with no known exploitation.
68
ChatGPT can peek at your Chrome tabs now
OpenAI's ChatGPT Chrome extension can now read open tabs and control the browser for forms, messages, and downloads.
52
Google Play Hosted Fake Chrome App With 100,000+ Downloads
Google Play hosted a Hizbartech fake Chrome app, later removed, that showed 100,000-plus downloads.
60
Fake Chrome App on Google Play Evades Detection and Reaches 100,000+ Downloads
A Hizbartech app impersonated Chrome on Google Play and showed a disputed 100,000-download badge before apparent removal.
48
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
Russia-aligned UAC-0099 deployed the ASHVEIN RAT against Ukrainian government staff, hiding tasking in HTML.
78
Attackers Hijack Three ccTLDs to Obtain Google Certificates
Attackers hijacked the .gh, .sl, and .as registries and obtained unauthorized certificates covering Google domains.
78
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
Sixteen malicious Firefox extensions impersonating Rabby and OKX wallets stole recovery phrases via Cloudflare Workers.
64
Google Chrome Update Fixes Massive 247 Vulnerabilities, Including 4 Code Execution Flaws
Google patched 247 Chrome flaws, including four critical use-after-free bugs, in version 155.0.8059.39.
67
ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware
A ClickFix campaign compromised over 100 Ukrainian websites to deliver the Lunex information stealer.
71
Google Releases Chrome Update With 32 Security Fixes for Windows, Mac and Linux
Google shipped Chrome 154 fixes for 32 flaws, including critical ANGLE bug CVE-2026-102331.
66
Malicious VPN Extensions Turn Browser Users Into Residential Proxy Servers
Thirty-one malicious Chrome VPN extensions enrolled about 356,000 browsers into a remotely controlled residential proxy network.
62
Fake VPN Extensions Hijack Browser Traffic Through Hidden Proxy Servers
Thirty-one fake Chrome VPN extensions, with about 356,000 installs, route browser traffic through attacker-controlled proxies.
71
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
A Chrome Web Store ad blocker called Poper Blocker exfiltrates sensitive data and was downloaded millions of times.
74
PerceptFence: Content-Mediation Architecture and Deterministic Coverage for Screen-Share AI Assistants
PerceptFence mediates screen-share AI assistant capture to redact secrets, beating Presidio on OCR-surviving PII in synthetic tests.
44
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer
Attackers hijacked Ukrainian sites with a fake Cloudflare CAPTCHA to install Psychedelic Stealer and steal credentials.
66
CLOSEDQUORUM, the malware that asks four AI models what to do next
Cisco Talos says CLOSEDQUORUM lets four commercial AI models vote on credential and wallet theft.
74
Google Chrome security advisory (AV26-955)
Canadian Cyber Centre flags Chrome Stable Channel desktop vulnerabilities and urges users to update.
38
New ClosedQuorum Windows malware uses AI for attack decisions
ClosedQuorum, a Go Windows implant, lets several LLMs choose post-compromise actions without a human operator.
62
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
Securonix details TASK#STOMP, a PowerShell backdoor stealing documents, Wi-Fi passwords, and clipboard data.
63
EtherHiding Malware Abuses Polygon Blockchain to Hide C2 and Steal Banking Credentials
EtherHiding malware uses Polygon blockchain smart contracts for resilient C2 and steals banking credentials from nearly 500 targeted domains.
85
BragJack Attack Hijacks AI Assistants in 5 Popular Browsers With Zero Clicks
Researchers disclosed BragJack, a zero-click extension attack hijacking AI assistants in Chrome, Edge, Opera, Comet, and Claude.
68
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
AI-assisted bug hunting drives record vulnerability disclosures, with 66,401 CVEs logged in 2026 so far, nearly double last year's pace, straining defenders and open-source maintainers.
50
Malware bypasses browser checks to force install Chrome, Edge extensions
Elastic Security Labs detailed KREMLIN, a Brazilian banking malware that silently installs malicious Chrome and Edge extensions, with 1,515 confirmed infections.
62
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Researchers showed a single browser extension could hijack AI agents in Chrome, Edge, Comet, Opera Neon and Claude in Chrome, earning $20,000 in bounties.
62
KREMLIN Banking Malware Infects Over 1,500 Systems With Malicious Chrome Extension
Elastic tracks KREMLIN banking malware that used fake Brazilian bank JavaScript lures to deploy malicious Chrome and Edge extensions on 1,515 systems.
52
Researchers Uncover 10,000+ Malware Loaders Behind YouTube and SEO Poisoning Campaign
Unit 42 uncovers CL-CRI-1171, a two-year pay-per-install campaign distributing 10,000+ OfferLoader samples via YouTube and SEO poisoning.
66
CVE-2026-87464: RCE outside sandbox in Chromium prior to 153.0.8010.36
CVE-2026-87464 is a critical use-after-free in Chrome's WebGL allowing sandbox-escaping RCE via crafted HTML pages, fixed in 153.0.8010.36.
78
New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws
Multiple China-linked espionage groups share the BlueMoon exploit kit chaining Chrome V8 zero-days and a Windows ALPC LPE to deploy backdoors.
85
Fake GTA 6 Installer Steals Browser Passwords, Discord Tokens and Crypto Data From Gamers
Huntress found fake GTA 6 installer ISOs spreading NJRAT, DCRAT, Mercurial Grabber and a Chaos ransomware wiper that steals credentials.
47
Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days
Proofpoint reports four nation-state actors, mostly China-nexus, adopted the BlueMoon Chrome and Windows zero-day exploit kit within 12 days, targeting US organizations.
85
China-Linked Hackers Exploit Chrome and Windows Zero-Days in BlueMoon Attacks
China-linked clusters deploy the BlueMoon kit chaining Chrome V8 CVE-2026-85046 and Windows LPE CVE-2026-85880 in espionage campaigns.
80
Google Chrome Zero-day Vulnerability Exploited in the Wild (CVE-2026-87491)
Google patched actively exploited Chrome V8 out-of-bounds write CVE-2026-87491; CISA added it to KEV with a September 23 patch deadline.
80
Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits
Proofpoint reports the BlueMoon exploit kit, chaining two Chrome V8 zero-days and a Windows ALPC bug, being shared across China-linked espionage groups.
85
Four groups caught using the same Chrome and Windows exploit kit
Proofpoint reports at least four hacking groups, some China-linked, share the BlueMoon exploit kit chaining Chromium and Windows kernel vulnerabilities to install malware.
80
Chinese espionage groups swarm to exploit triple-link chain of zero-days
At least four China-aligned espionage groups chained three zero-days in Chromium browsers and Windows ALPC for espionage since late August.
88
Chinese espionage groups swarm to exploit triple-link chain of zero-days
Four China-aligned espionage groups, starting with TA412/APT31, chained zero-days CVE-2026-85046, CVE-2026-87491 and CVE-2026-85880 to spy on targets since late August.
85
Related CVEs
by mentions- CVE-2026-850462%8.8Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
- CVE-2026-116452%8.8Out-of-Bounds Read/Write in Google Chrome V8 Enables In-Sandbox Code Execution
- CVE-2026-39092%8.8Out-of-Bounds Write in Google Chrome's Skia Rendering Engine
- CVE-2026-244155%8.8Use-After-Free in Google Chromium CSS Rendering Exposes Chrome, Edge, Opera Users
- CVE-2026-528114%8.8Use-After-Free in Google Chrome's Dawn (WebGPU) Component Enables Arbitrary Code Execution
- CVE-2026-39103%8.8Out-of-Bounds Memory Flaw in Google Chrome V8 Allows Sandboxed Code Execution
- CVE-2026-874914%8.8Actively Exploited Out-of-Bounds Write in Google Chrome V8
- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-87464<1%9.6Use-After-Free in WebGL in Google Chrome Allows Code Execution Outside the Sandbox
- CVE-2026-06287%8.8Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious…
Appears with
- Googlevendor · 41
- Microsoftvendor · 18
- Microsoft Edgeproduct · 17
- Googleorganization · 13
- V8product · 8
- Proofpointvendor · 7
- Chromiumproduct · 6
- APT31threat actor · 6
- UNK_LateNightthreat actor · 6
- Violet Typhoonthreat actor · 5
- TA412threat actor · 5
- Claudeai model · 4
- CISAorganization · 4
- UNK_DoubleCheckthreat actor · 4
- Geminiai model · 4
- Microsoft Windowsproduct · 4
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.