Guardz integrates Palo Alto Prisma Browser protection for small businesses
MSPs can push the extension to Chrome and Edge and tie phishing blocks to email, identity and endpoint alerts.
Stories per day · 30 days
4 RSS
20 stories, newest first · one card per story
Stories tagged #browser-security
Akamai partner post pitches browser interaction security
The October 30 partner blog outlines browser visibility gaps and a sales playbook, but the feed text is mostly navigation.
1
Two characters open up a world of typosquatting opportunities in Chromium browsers
Researchers demonstrate Cyrillic barred-o and Latin k-hook glyphs bypass Chromium's anti-spoofing checks, letting lookalike domains like fake Apple and Okta render as genuine.
4
A Mere Mortal's Introduction to JIT Vulnerabilities in JavaScript Engines
TrustFoundry's guide explains JIT compiler bugs in JavaScript engines, using V8, D8, and a CTF example.
6
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
NordLayer argues browser-based SaaS attacks, including AiTM phishing and malicious extensions, often evade traditional EDR.
4
Know Your Enemy: Browser-Based Attack Techniques in 2026
Push Security survey details six dominant browser attack techniques for 2026, including AiTM phishing, ClickFix, OAuth abuse, and session hijacking.
10
Proofpoint Stops the Attacks Traditional Defenses Miss in the AI Era
Proofpoint announced an agentic collaboration-security system using intent-based detection across email and browsers.
1
_Pattara_Alamy.jpg%3Fwidth%3D720%26quality%3D80%26disable%3Dupscale&w=828&q=75)
BragJack Attack Can Turn a Browser's Agentic AI Against It
New BragJack attack hijacks browsers' built-in agentic AI to access data, run malicious actions, and exfiltrate information.
Chrome, Firefox Updates Patch 115 Vulnerabilities
Google and Mozilla patch 115 vulnerabilities across Chrome 153 and Firefox 156, including three critical Chrome bugs; no exploitation reported.
1
Citrix adds AI-powered browser activity analysis to SecurAccess
Citrix launched Session Insights for SecurAccess with Chrome Enterprise, using AI to record and analyze browser activity from users and autonomous agents.
3
12 Best Enterprise Browsers Compared (2026): Features & Pricing
2026 comparison of twelve enterprise browsers ranks Island and Palo Alto Talon as purpose-built leaders, with Chrome Enterprise and Edge free or bundled.
7
An untrusted site can freeze a Mac using WebGPU
A security researcher shows an untrusted website can trigger a system-wide freeze of a Mac via the WebGPU API.
FortiPAM Chrome Extension Vulnerability Lets Malicious Sites Control Browser Proxy and Record Tabs
Fortinet patched CVE-2026-84388 (CVSS 9.1) in its FortiPAM Chrome extension, letting malicious websites alter proxy settings, open tabs and record sessions.
4
New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser
Barracuda details a phishing campaign that renders pages in-browser via blob URLs, routed through Microsoft Teams and cdn.bloom[.]io to evade detection.
Google Chrome 153 Released With 230 Security Fixes and Zero-Day Exploited in the Wild
Google released Chrome 153 with 230 security fixes, patching CVE-2026-87491, a V8 out-of-bounds write zero-day actively exploited in the wild.
3
Chrome 153 Fixes 230 Vulnerabilities, Including One 0-Day Exploited in the Wild
Google shipped Chrome 153 with 230 fixes, including CVE-2026-87491, a V8 out-of-bounds write zero-day exploited in the wild.
8
Google patches actively exploited Chrome zero-day (CVE-2026-85046)
Google patches actively exploited Chrome zero-day CVE-2026-85046, a V8 type confusion bug enabling sandboxed code execution via crafted HTML pages.
2
Google fixes the sixth actively exploited Chrome zero
Google patched 12 Chrome flaws including actively exploited V8 type confusion zero-day CVE-2026-85046 (CVSS 8.8), enabling sandboxed remote code execution via crafted webpages.
4
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google patches actively exploited Chrome V8 zero-day CVE-2026-85046 (CVSS 8.8); CISA adds it to KEV with a September 18 deadline.
2
19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto
Socket found 19 malicious Chrome and Edge extensions, active since February 2024, stealing wallet seed phrases and credentials and draining crypto from about 80,000 users.
1