Experimental News Clipping Site

Tag: Chrome

  • Krebs on Security: Patch Tuesday, April 2025 Edition

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/04/patch-tuesday-april-2025-edition/ Source: Krebs on Security Title: Patch Tuesday, April 2025 Edition Feedly Summary: Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft’s most-dire “critical" rating, meaning malware…

  • The Register: Chrome to patch decades-old flaw that let sites peek at your history

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/07/chrome_135_history_sniffing/ Source: The Register Title: Chrome to patch decades-old flaw that let sites peek at your history Feedly Summary: After 23 years, the privacy plumber has finally arrived to clean up this mess A 23-year-old side-channel attack for spying on people’s web browsing histories will get shut down in the forthcoming Chrome 136,…

  • The Register: After Chrome patches zero-day used to target Russians, Firefox splats similar bug

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/03/28/google_kaspersky_mozilla/ Source: The Register Title: After Chrome patches zero-day used to target Russians, Firefox splats similar bug Feedly Summary: Single click on a phishing link in Google browser blew up sandbox on Windows Google pushed out an emergency patch for Chrome on Windows this week to stop attackers exploiting a sandbox-breaking zero-day vulnerability,…

  • Slashdot: Google Patches Chrome Sandbox Escape Zero-Day Caught By Kaspersky

    —

    by

    Kurt Seifried
    in

    Source URL: https://slashdot.org/story/25/03/26/0143210/google-patches-chrome-sandbox-escape-zero-day-caught-by-kaspersky?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google Patches Chrome Sandbox Escape Zero-Day Caught By Kaspersky Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a recently patched sandbox escape vulnerability in Google Chrome, highlighting its implications in a targeted cyberespionage campaign. It underscores the importance of timely updates and security measures against such…

  • The Register: Mobsters now overlap with cybercrime gangs and use AI for evil, Europol warns

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/03/24/modern_mafiosos_wield_ai/ Source: The Register Title: Mobsters now overlap with cybercrime gangs and use AI for evil, Europol warns Feedly Summary: PLUS: Russian bug-buyers seeks Telegram flaws; Another WordPress security mess; NIST backlog grows; and more! Infosec In Brief Organized crime networks are now reliant on digital tech for most of their activities according…

  • Hacker News: Memory Safety for Web Fonts

    —

    by

    Kurt Seifried
    in

    Source URL: https://developer.chrome.com/blog/memory-safety-fonts Source: Hacker News Title: Memory Safety for Web Fonts Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details Google’s transition from the FreeType font processing library to Skrifa, a Rust-based alternative, aimed at enhancing security and efficiency within Chrome. This shift emphasizes the importance of memory safety in preventing…

  • Microsoft Security Blog: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/17/stilachirat-analysis-from-system-reconnaissance-to-cryptocurrency-theft/ Source: Microsoft Security Blog Title: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft Feedly Summary: Microsoft Incident Response uncovered a novel remote access trojan (RAT) named StilachiRAT, which demonstrates sophisticated techniques to evade detection, persist in the target environment, and exfiltrate sensitive data. This blog primarily focuses on analysis of the WWStartupCtrl64.dll…