55
12 Best Enterprise Browsers Compared (2026): Features & Pricing
2026 comparison of twelve enterprise browsers ranks Island and Palo Alto Talon as purpose-built leaders, with Chrome Enterprise and Edge free or bundled.
Guide compares twelve enterprise browser options across three models: purpose-built secure browsers (Island, Talon, Surf), layered controls on existing browsers (Chrome Enterprise, Edge for Business, LayerX, Seraphic), and streamed/isolated browsers (Kasm). Island and Palo Alto's Prisma Access Browser lead the purpose-built category for BYOD and contractor DLP. It also notes Mammoth Cyber has ceased operations.
12
BleachBit 6.0.4 fixes secure wiping that skipped clusters on Windows
BleachBit 6.0.4 fixes Windows secure-wipe bugs that skipped fragmented-file clusters, adds HSTS tracker deletion, early macOS support, and broad hardening.
The open-source cleaner BleachBit released version 6.0.4, fixing Windows shredding bugs where fragmented files were wiped incompletely because noncontiguous clusters were skipped, leaving potentially sensitive data on disk. The release adds deletion of dynamic HSTS tracking data in six Chromium-based browsers and Zen, early macOS support including a Safari cleaner and full CLI, plus hardening such as absolute paths for ipconfig/taskkill, symlink and reparse-point handling, DTD-free XML parsing, and PATH/environment sanitization when running as root.
26
55
Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it
Rapid7's version 8.58 adds credentialed pre-port discovery, letting scan engines query hosts for listening TCP/UDP ports instead of network probing.
Rapid7 documents credentialed pre-port discovery, available from version 8.58 as an off-by-default per-template option under Asset Discovery. The scan engine authenticates with existing SSH, Scan Assistant, or Windows credentials and receives the host's authoritative list of listening TCP and UDP ports, skipping the network port scan. Hosts without matching credentials silently fall back to network port scanning. Trade-offs include reporting firewall-blocked ports the engine cannot reach, longer scans, and early termination findings caused by repeated connection failures.
20
GrapheneOS' rewritten Messages app is released
GrapheneOS published version 13 of its rewritten Messaging app, a messaging tool from the privacy-hardened Android OS project.
GrapheneOS released version 13 of its rewritten Messaging application on GitHub. The release surfaced via a Hacker News thread with 61 points and 22 comments. The provided text contains only the release listing, with no vulnerability or exploit details; GrapheneOS is a privacy- and security-focused Android OS project, making the release relevant to mobile privacy tooling.
22
Proactive cyber defense for governments and enterprises
Google launches the Fairwind Program giving governments and enterprises access to Gemini 3.8 Flash Cyber and CodeMender for autonomous vulnerability discovery and patching.
Google announced the Fairwind Program, a limited-access offering bringing its cyber defense capabilities to government agencies, critical infrastructure operators, and trusted partners, with more than 650 participating organizations. It combines the Gemini 3.8 Flash Cyber model with the CodeMender harness to autonomously find, verify, and fix vulnerabilities, generating deployment-ready patches in minutes inside customers' cloud environments. Google also raised its total cybersecurity funding commitment above $100 million, including $36 million granted to 35 US cyber clinics supporting hospitals, school districts, and municipal utilities.
68
WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign
Meta now allows multiple passkeys per WhatsApp account and upgraded two-step verification to full passwords, hardening sign-in for more than 1 billion users.
Meta announced support for multiple passkeys on a single WhatsApp account for iOS and Android, noting more than 1 billion people already use a passkey to log in. WhatsApp also upgraded two-step verification from a six-digit PIN to a full alphanumeric password and added Android call context such as origin location, contact status, and shared groups. The features aim to harden account sign-in against phishing and one-time passcode interception and to counter caller scams relying on urgency.
30
New Account Security Features for WhatsApp
Meta added stronger two-step verification and unknown-caller context features to WhatsApp to harden user account security against takeovers.
Meta announced new account security features for WhatsApp, including stronger two-step verification options. The rollout also adds additional context for calls from unknown callers. The features are designed to reduce account takeover risk and improve user confidence in call-based communication.
22
Citrix UniconOS dual boot turns Windows endpoints into their own recovery device
Citrix released UniconOS dual boot in Release 7 2607, turning Windows endpoints into self-recovery devices after ransomware, failed updates or OS corruption.
Citrix announced dual boot in UniconOS Release 7 2607, which installs an isolated, hardened recovery environment alongside Windows in a separate partition protected by secure boot. If Windows is unavailable, users reboot into UniconOS and reconnect to applications via Citrix DaaS and SecurAccess with Chrome Enterprise. The capability is aimed at reducing reliance on spare hardware and central reimaging during ransomware or update failures, with automatic enrollment in UniconOS Management for fleet-wide boot policies.
25
55
Threat Matrix: Mapping threats across cloud web applications
Microsoft released a Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework mapping threats to cloud-hosted web apps and serverless platforms.
Microsoft introduced the cloud web applications threat matrix, which organizes attack techniques for cloud-hosted web apps and serverless platforms using MITRE ATT&CK tactics, from resource development through impact. The framework covers attack paths spanning application code, managed runtimes, workload identities, and deployment pipelines, cataloging techniques such as subdomain takeover, code injection in connected repositories, compromised registry images, exposed admin interfaces, and serverless trigger injection. It builds on Microsoft's earlier Kubernetes and storage services matrices to help defenders identify visibility gaps, prioritize hardening, and plan investigations in cloud-native environments.
35
AI-Infra-Guard: Open-source security scanner for AI systems
Tencent's Zhuque Lab open-sourced AI-Infra-Guard, a scanner that fingerprints AI services, checks 1,600+ CVEs, and evaluates MCP skills.
AI-Infra-Guard fingerprints running AI services such as Ollama, vLLM and ComfyUI, checks them against more than 1,600 known CVEs, and inspects MCP servers and agent skills across 14 risk categories. Its SkillTrustBench judging set contains 5,520 human-labeled samples, with false positive rates of 1.20%–18.67% depending on the judging model. Users include ICBC, China Merchants Bank, China Telecom, Lenovo, vivo and Bilibili. Release 4.1.9 hardened scanning agents against indirect prompt injection, and the open-source build ships without authentication, requiring a reverse proxy with Basic Auth or an IP allowlist.
35
F5 speeds up virtual patching to counter AI-driven threats
F5 added anomaly detection and agentic threat intelligence to its AI-powered WAF, enabling virtual patch enforcement against exploits within minutes.
F5 announced enhancements to F5 WAF for Distributed Cloud, adding anomaly detection that builds per-application traffic baselines and agentic threat intelligence built on technology from the Fletch acquisition. The AI-powered WAF scores each request in real time with a neural network risk engine, and internal testing claims 98% threat detection efficacy with false positives reduced to 1%. Automated virtual patching via Distributed Cloud Web App Scanning extends to F5 WAF for BIG-IP, letting teams block actively exploited vulnerabilities at the request level in minutes; agentic features are rolling out over coming months.
30
Bot detection arrives in CrowdSec 1.8.0, along with two DoS fixes
CrowdSec 1.8.0 adds WAF bot detection via challenges and fingerprinting and fixes denial-of-service flaws in HTTP and Kubernetes audit datasources.
CrowdSec 1.8.0, released August 31, introduces bot detection in its WAF using client challenges and fingerprinting, plus fixes for two denial-of-service vulnerabilities in the HTTP acquisition datasource (unbounded decompressed body size, trusted Content-Length) and the Kubernetes audit webhook datasource (unbounded request body reads). The release also adds a dedicated Kubernetes datasource pulling logs directly from the apiserver, new HTTP helpers for external queries in the expression language, and performance work on the decisions stream endpoint. The challenge requires SSE4.1 and writable-executable memory, so some legitimate visitors may be blocked.
22
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point revealed BTR Reforged, a technique weaponizing Microsoft Defender's built-in BTR.sys driver to delete security software at boot without exploiting any vulnerability.
Check Point Research disclosed BTR Reforged, a technique that abuses BTR.sys, a legitimately signed Windows Defender boot-time remediation driver, to perform arbitrary kernel-level file and registry operations on Windows 7 through Windows 11 25H2 without exploiting a software flaw. The BTR_CLI proof-of-concept tool, presented at Black Hat USA 2026 and DEF CON 34, installs the driver via direct registry writes and executes deletions during the boot-time 'golden window' before Defender's user-mode services start, demonstrated by deleting the full Defender stack on a patched Windows 11 machine. Exploitation requires SeLoadDriverPrivilege; Microsoft confirmed it does not meet criteria for immediate servicing and no patch is planned. No evidence of real-world abuse was found, and related indicators of compromise via Sysmon events were published.
58
55
30
42
55
55
55
55
30