Unit 42 says Falcon C2 compromised government sites via browser JavaScript
The framework stole credentials and cookies, sideloaded Chrome extensions, and delivered the Antino implant over OneDrive.
Stories per day · 30 days
3 RSS
Relatedchrome16google13use-after-free8firefox3memory-corruption3mozilla3zero-day3advisory2canada2patch2privacy2anthropic1apple1backdoor1c21canadian-cyber-centre1chrome-extensions1chromium1
44 stories, newest first · one card per story
Stories tagged #browser
Google fixes exploited Chrome zero-day CVE-2026-125350
The use-after-free in XML is the eighth exploited Chrome zero-day of 2026; fixed builds are 157.0.8103.50 and .51.
Firefox before 159.0.1 affected by vulnerability fixed in 159.0.1
Canada's Cyber Centre urges users to review Mozilla's links and apply updates as they become available.
Google Chrome 157 Released With 213 Security Fixes
Google Chrome 157 fixes 213 vulnerabilities including 7 critical ones; gradual rollout continues.
Chrome 157 patches 213 security issues including 7 critical flaws
Chrome 157.0.8103.39 fixes seven critical flaws including memory corruption in ANGLE for Android allowing potential remote code execution.
Google Releases Chrome 157 Fixing 213 Bugs
Chrome 157 fixes 213 security bugs including 7 critical memory safety issues across graphics and browser components, with rollout ongoing.
Chrome 157 Rolls Out With 213 Security Fixes
Google releases Chrome 157 fixing 213 vulnerabilities, seven critical memory safety bugs.
319 Chrome extensions override default search without extra permissions
The decade-long set is linked to about 13.4 million reported users, a cumulative figure rather than current infections.
1
Chrome desktop before 156.0.8078.73 affected, Google advisory says
Canadian advisory AV26-1095, dated October 28, tells users to install the Stable Channel updates.
Google fixes 52 Chrome flaws, including four critical bugs
Stable builds move to 156.0.8078.73/.74 on Windows and Mac and 156.0.8078.73 on Linux, with no exploitation stated.
Chrome 156 and Firefox 159 patch more than 200 flaws
CVE-2026-118306 can run arbitrary code outside Chrome's sandbox from a crafted HTML page; no in-the-wild exploitation is mentioned.
Chrome 156 and Firefox 159 patch critical memory-safety flaws
Google shipped 52 fixes, four rated Critical, and Mozilla fixed 167 bugs; both credited AI-assisted bug finding.
Opera previews WebAI standard for running models in the browser
The early preview in Opera One can use models such as Gemma or Apple’s on-device model, with processing kept on the device.
TRUST#GRAFT uses logged-in WordPress admins to install a PHP backdoor
The chain uploads wm.zip as Web Media Optimizer and copies itself to mu-plugins so deleting the visible plugin leaves it loaded.
Chrome 156 patches 353 flaws, mostly memory-safety bugs
Six critical issues are included; Google does not say any are exploited, and stable builds are 156.0.8078.47/.48.
Chrome 156 fixes 353 vulnerabilities, six of them critical
Linux builds are 156.0.8078.47 and Windows and macOS builds are 156.0.8078.47 or .48; exploitation is not addressed.
2
Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found With Claude AI
Google patched ten Chrome flaws, including critical prerender use-after-free CVE-2026-110922, with no known exploitation.
Google security advisory (AV26-1060)
Canada's Cyber Centre urges updates for vulnerable Chrome builds before 155.0.8059.84.
Google security advisory (AV26-1045)
Canada's Cyber Centre urges updates for desktop Chrome before 155.0.8059.79 after Google's October advisory.
Chrome 155 Update Patches 247 Vulnerabilities
Google's Chrome 155 update patches 247 vulnerabilities, including four critical use-after-free flaws; no exploitation in the wild was reported.
Google security advisory (AV26-984)
Canadian Cyber Centre advisory AV26-984 tells administrators to patch vulnerable Stable Channel Chrome for Desktop.
Google Releases Chrome Update With 32 Security Fixes for Windows, Mac and Linux
Google shipped Chrome 154 fixes for 32 flaws, including critical ANGLE bug CVE-2026-102331.
Chrome, Firefox Updates Patch Over 100 Vulnerabilities
Google and Mozilla patched more than 100 Chrome and Firefox flaws, including critical CVE-2026-102331, with no known exploitation.
WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006
WebKitGTK and WPE WebKit published security advisory WSA-2026-0006.