#browsersecurity — Public Fediverse posts

What are the best #private #browsers in 2026?
https://privacytests.org/

Looks pretty exhaustive. And yes, I do use @Vivaldi

#privacy #security #safety #onlinesafety #BrowserSecurity #browser

What are the best #private #browsers in 2026?
https://privacytests.org/

Looks pretty exhaustive, but there are some errors.

I use @Vivaldi

PS, duckduckgo is american, and that means it is less safe for #Canadians to use due to things like FISA, the CLOUD act and the NSA.

#privacy #security #safety #onlinesafety #BrowserSecurity #browser

New by me: Apple's iCloud Private Relay Isn't Really That Private

https://www.kylereddoch.me/blog/apples-icloud-private-relay-isnt-really-that-private/

#Cybersecurity #InfoSec #Apple #Privacy #BrowserSecurity

New by me: Apple's iCloud Private Relay Isn't Really That Private

https://www.kylereddoch.me/blog/apples-icloud-private-relay-isnt-really-that-private/

#Cybersecurity #InfoSec #Apple #Privacy #BrowserSecurity

Malware hides in browsers as ad fraud outpaces detection: Confiant finds malware built inside browsers as MCP drops sessions, Brazil bans deepfake ads, Amazon bots dodge origin queries, and Time sells ads to bots. https://ppc.land/malware-hides-in-browsers-as-ad-fraud-outpaces-detection/ #Malware #AdFraud #CyberSecurity #BrowserSecurity #DigitalMarketing

Malware hides in browsers as ad fraud outpaces detection: Confiant finds malware built inside browsers as MCP drops sessions, Brazil bans deepfake ads, Amazon bots dodge origin queries, and Time sells ads to bots. https://ppc.land/malware-hides-in-browsers-as-ad-fraud-outpaces-detection/ #Malware #AdFraud #CyberSecurity #BrowserSecurity #DigitalMarketing

DARKSPECTRE: THE BROWSER EXTENSIONS THAT TURNED INTO SPY TOOLS 🕵️‍♂️

🌐#DarkSpectre #CyberSecurity #BrowserSecurity #ChromeExtensions #Firefox #MicrosoftEdge #OnlinePrivacy #DataProtection #Malware #CyberThreats #InfoSec #HackingAwareness #DigitalSecurity #TechNews #PrivacyMatters #ArtestoMellivoura

DARKSPECTRE: THE BROWSER EXTENSIONS THAT TURNED INTO SPY TOOLS 🕵️‍♂️

🌐#DarkSpectre #CyberSecurity #BrowserSecurity #ChromeExtensions #Firefox #MicrosoftEdge #OnlinePrivacy #DataProtection #Malware #CyberThreats #InfoSec #HackingAwareness #DigitalSecurity #TechNews #PrivacyMatters #ArtestoMellivoura

Firefox 152.0.6 and Chrome 150.0.7871.124/.125 resolve CRITICAL flaws. Firefox bugs (CVE-2026-15718, CVE-2026-15719) have public exploits, but no in-the-wild attacks. Patch ASAP. Chrome fixes 15 issues. https://radar.offseq.com/threat/critical-vulnerabilities-patched-with-fresh-chrome-e977806d68193e89 #OffSeq #Vuln #PatchNow #BrowserSecurity

Firefox 152.0.6 and Chrome 150.0.7871.124/.125 resolve CRITICAL flaws. Firefox bugs (CVE-2026-15718, CVE-2026-15719) have public exploits, but no in-the-wild attacks. Patch ASAP. Chrome fixes 15 issues. https://radar.offseq.com/threat/critical-vulnerabilities-patched-with-fresh-chrome-e977806d68193e89 #OffSeq #Vuln #PatchNow #BrowserSecurity

Since Chronium 148, Math.tanh is now fingerprintable to link underlying OS

https://scrapfly.dev/posts/browser-math-os-fingerprint/

Comments: https://news.ycombinator.com/item?id=48884853

#HackerNews #Chronium148 #MathFingerprinting #OSPrivacy #BrowserSecurity

Since Chronium 148, Math.tanh is now fingerprintable to link underlying OS

https://scrapfly.dev/posts/browser-math-os-fingerprint/

Comments: https://news.ycombinator.com/item?id=48884853

#HackerNews #Chronium148 #MathFingerprinting #OSPrivacy #BrowserSecurity

As ClickFix and social engineering attacks are ever growing and evolving into new forms while remaining the same at their core, Opera took the security of their users into their own hands and released a feature called "Paste Protect" that is an integral part of their browser to protect users against ClickFix type of attacks.

Firefox and Chrome should take Opera’s approach as an example and implement something similar, since the vast majority of the web browser market belongs to Chrome, followed by Safari and Firefox, which both use their own rendering engine that is not based on Chromium.

#WebBrowsers #Opera #OperaBrowser #Chrome #Firefox #BrowserSecurity

As ClickFix and social engineering attacks are ever growing and evolving into new forms while remaining the same at their core, Opera took the security of their users into their own hands and released a feature called "Paste Protect" that is an integral part of their browser to protect users against ClickFix type of attacks.

Firefox and Chrome should take Opera’s approach as an example and implement something similar, since the vast majority of the web browser market belongs to Chrome, followed by Safari and Firefox, which both use their own rendering engine that is not based on Chromium.

#WebBrowsers #Opera #OperaBrowser #Chrome #Firefox #BrowserSecurity

CVE-2026-15130 (HIGH): Chrome <150.0.7871.115 has an insufficient policy enforcement bug, letting remote attackers bypass site isolation with crafted HTML. No exploits reported. Check https://radar.offseq.com/threat/cve-2026-15130-insufficient-policy-enforcement-in--933c1db80d107c58 for updates. #OffSeq #Chrome #BrowserSecurity #Vulnerability

To bring back Brave’s "forgetful browsing" (remove all site data when closing a tab), I'm now using this extension in Helium: https://chromewebstore.google.com/detail/auto-delete-cookies-on-ta/pfkgmfddjojnoekblkdgpgmehpagjflg

Seems to work as advertised 👍🏻

#browsers #BrowserSecurity

To bring back Brave’s "forgetful browsing" (remove all site data when closing a tab), I'm now using this extension in Helium: https://chromewebstore.google.com/detail/auto-delete-cookies-on-ta/pfkgmfddjojnoekblkdgpgmehpagjflg

Seems to work as advertised 👍🏻

#browsers #BrowserSecurity

When 2+2=5

https://arstechnica.com/security/2026/06/ai-browsers-can-be-lulled-into-a-dream-world-where-guardrails-no-longer-apply/

Comments: https://news.ycombinator.com/item?id=48766949

#HackerNews #When2plus2equals5 #AI #Ethics #BrowserSecurity #TechNews #DreamWorld

When 2+2=5

https://arstechnica.com/security/2026/06/ai-browsers-can-be-lulled-into-a-dream-world-where-guardrails-no-longer-apply/

Comments: https://news.ycombinator.com/item?id=48766949

#HackerNews #When2plus2equals5 #AI #Ethics #BrowserSecurity #TechNews #DreamWorld

Google Chrome introduces a new option to auto-pin extensions to the toolbar by default, addressing user forgetfulness and enhancing browser security.

#GoogleChrome #ChromeExtensions #BrowserSecurity #TechNews #ProductivityTools

https://securityonline.info/chrome-auto-pin-extensions/?utm_source=mastodon&utm_medium=jetpack_social

Google Chrome introduces a new option to auto-pin extensions to the toolbar by default, addressing user forgetfulness and enhancing browser security.

#GoogleChrome #ChromeExtensions #BrowserSecurity #TechNews #ProductivityTools

https://securityonline.info/chrome-auto-pin-extensions/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-14423: Type confusion in Chrome (pre-150.0.7871.46) enables sandbox escape via crafted HTML. HIGH severity — update Chrome ASAP to patch. Details: https://radar.offseq.com/threat/cve-2026-14423-type-confusion-in-google-chrome-ebdcbaa0782002d1 #OffSeq #Chrome #Vuln #BrowserSecurity

🔍 New analysis: an Italian phishing campaign abusing Chrome Native Messaging to escape browser sandbox restrictions.

Attack chain:

Invoice phishing → obfuscated JS → DLL sideloading → malicious Chrome extension → Native Messaging Host → PowerShell execution.

Legitimate technologies chained together to turn Chrome into a backdoor.

📌 https://www.d3lab.net/breaking-out-of-chromes-sandbox-a-native-messaging-backdoor-observed-in-italy/

#ThreatIntelligence #Chrome #BrowserSecurity #MalwareAnalysis #CTI #CyberSecurity

🔍 New analysis: an Italian phishing campaign abusing Chrome Native Messaging to escape browser sandbox restrictions.

Attack chain:

Invoice phishing → obfuscated JS → DLL sideloading → malicious Chrome extension → Native Messaging Host → PowerShell execution.

Legitimate technologies chained together to turn Chrome into a backdoor.

📌 https://www.d3lab.net/breaking-out-of-chromes-sandbox-a-native-messaging-backdoor-observed-in-italy/

#ThreatIntelligence #Chrome #BrowserSecurity #MalwareAnalysis #CTI #CyberSecurity

Google workspace threatening to block Firefox access

https://tales.fromprod.com/2026/169/google-workspace-threatening-to-block-firefox.html

#HackerNews #GoogleWorkspace #Firefox #Threat #Block #TechNews #BrowserSecurity

Google workspace threatening to block Firefox access

https://tales.fromprod.com/2026/169/google-workspace-threatening-to-block-firefox.html

#HackerNews #GoogleWorkspace #Firefox #Threat #Block #TechNews #BrowserSecurity

🛡️ Chrome & Firefox updates fix CRITICAL & HIGH memory safety vulns (use-after-free, memory corruption). Risk: RCE & sandbox escape. No active exploits. Update Chrome (>=149.0.7827.155/.156) & Firefox (>=152) ASAP! https://radar.offseq.com/threat/chrome-and-firefox-updated-to-patch-critical-high--fda57fb1 #OffSeq #BrowserSecurity #Infosec

CRITICAL: Browsers are now the front line for AI security. AI-driven phishing & shadow AI tool use evade blocklists, causing data leaks & account takeovers. No patch — deploy browser-layer telemetry for detection & control. https://radar.offseq.com/threat/why-the-browser-is-now-the-front-line-for-ai-secur-5b00c762 #OffSeq #AIsecurity #BrowserSecurity #Infosec

FROST: Wie eine Browser-API zur Spionageschnittstelle wird

Forscher der TU Graz haben gezeigt, dass Websites über eine Standard-Browserfunktion die SSD-Zugriffszeiten eines Nutzers messen und daraus ableiten können, welche Seiten er besucht und welche Anwendungen er öffnet – ohne jede Benutzerinteraktion und ohne dass der Nutzer es bemerkt.

https://www.all-about-security.de/frost-wie-eine-browser-api-zur-spionageschnittstelle-wird/

#api #browsersecurity

ChatGPT Exposes Users to Prompt Injection Attacks via Browser Content

Researchers have uncovered a vulnerability in ChatGPT that leaves users open to prompt injection attacks, where malicious content is embedded into web pages and then summarized by the AI system as legitimate information. This loophole could put users at risk of falling prey to spoofed security alerts and other online…

https://osintsights.com/chatgpt-exposes-users-to-prompt-injection-attacks-via-browser-content?utm_source=mastodon&utm_medium=social

#PromptInjectionAttacks #Chatgpt #AiSecurity #BrowserSecurity #EmergingThreats

@blogoklahoma Vanandium (https://github.com/GrapheneOS/Vanadium) and IronFox (https://ironfoxoss.org/) are also other recs. #Vanadium #grapheneos #ironfox #browser #browsers #WebBrowser #browserapp #browsersecurity #browserfavorites

@blogoklahoma Vanandium (https://github.com/GrapheneOS/Vanadium) and IronFox (https://ironfoxoss.org/) are also other recs. #Vanadium #grapheneos #ironfox #browser #browsers #WebBrowser #browserapp #browsersecurity #browserfavorites

Oh, look! Yet another 🔒 "revolutionary" tool promising to keep your secrets safe by encrypting files right in your browser. Because nothing screams secure like trusting your sensitive data to a JavaScript cryptography carnival 🎪. Enjoy the thrill of zero uploads and endless settings tweaks while hoping no one ever breaches your fortress of browser-based solitude. 😂🔐
https://secvant.com/ #browsersecurity #encryption #jokes #dataprivacy #techhumor #HackerNews #ngated

Oh, look! Yet another 🔒 "revolutionary" tool promising to keep your secrets safe by encrypting files right in your browser. Because nothing screams secure like trusting your sensitive data to a JavaScript cryptography carnival 🎪. Enjoy the thrill of zero uploads and endless settings tweaks while hoping no one ever breaches your fortress of browser-based solitude. 😂🔐
https://secvant.com/ #browsersecurity #encryption #jokes #dataprivacy #techhumor #HackerNews #ngated

Google Exposes Unfixed Chromium Flaw Details

A security researcher just blew the whistle on a glaring Chromium flaw that Google thought was fixed - but still works, putting tens of thousands of users at risk of a botnet attack. The exploit, first reported in 2022, allows malicious websites to remotely execute JavaScript on unsuspecting devices.

https://osintsights.com/google-exposes-unfixed-chromium-flaw-details?utm_source=mastodon&utm_medium=social

#Chromium #ZeroDay #SupplyChain #EmergingThreats #BrowserSecurity

Microsoft Alters Edge to Mitigate Password Exposure Risk

Microsoft is taking a major step to boost password security in its Edge browser, rolling out a defense-in-depth change to mitigate the risk of password exposure. This update will be applied across all supported Edge versions, prioritizing a swift rollout to protect users.

https://osintsights.com/microsoft-alters-edge-to-mitigate-password-exposure-risk?utm_source=mastodon&utm_medium=social

#BrowserSecurity #PasswordExposure #MicrosoftEdge #Defenseindepth #Proofofconcept

Akamai Bolsters AI Browser Security with $205M LayerX Acquisition

Akamai is taking browser security to the next level with its $205 million acquisition of LayerX, a cutting-edge startup that's changing the game with its innovative approach to securing interactions between users and applications. By integrating LayerX's technology, Akamai is bolstering its security stack to protect the…

https://osintsights.com/akamai-bolsters-ai-browser-security-with-205m-layerx-acquisition?utm_source=mastodon&utm_medium=social

#BrowserSecurity #Ai #ZeroTrustNetworkArchitecture #Microsegmentation #Ztna

New by me: Microsoft Says It’s “By Design.” Edge’s Plaintext Password Behavior Is Still a Security Problem

https://www.kylereddoch.me/blog/microsoft-says-its-by-design-edges-plaintext-password-behavior-is-still-a-security-problem/

#Cybersecurity #InfoSec #BrowserSecurity #MicrosoftEdge

New by me: Microsoft Says It’s “By Design.” Edge’s Plaintext Password Behavior Is Still a Security Problem

https://www.kylereddoch.me/blog/microsoft-says-its-by-design-edges-plaintext-password-behavior-is-still-a-security-problem/

#Cybersecurity #InfoSec #BrowserSecurity #MicrosoftEdge

New by me: Claude’s Chrome Extension Flaw Shows Why Agentic Browsing Needs Real Guardrails

https://www.kylereddoch.me/blog/claudes-chrome-extension-flaw-shows-why-agentic-browsing-needs-real-guardrails/

#Cybersecurity #InfoSec #BrowserSecurity #ChromeExtensions #AISecurity #MSP

New by me: Claude’s Chrome Extension Flaw Shows Why Agentic Browsing Needs Real Guardrails

https://www.kylereddoch.me/blog/claudes-chrome-extension-flaw-shows-why-agentic-browsing-needs-real-guardrails/

#Cybersecurity #InfoSec #BrowserSecurity #ChromeExtensions #AISecurity #MSP

Claude AI Extension Flaw Enables Cross-Plugin Hijacking

A security flaw in the Claude AI Chrome extension could put users at risk, as it allows other browser extensions to issue commands to Claude without verification. This vulnerability creates a backdoor for hackers to hijack the AI model, warns LayerX senior researcher Aviad Gispan.

https://osintsights.com/claude-ai-extension-flaw-enables-cross-plugin-hijacking?utm_source=mastodon&utm_medium=social

#ClaudeAiExtensionFlaw #CrosspluginHijacking #BrowserSecurity #Vulnerability #Llm

📚🚀 Oh, how dare a webpage reveal that your browser's been gossiping all along! 🤭 Thanks, Rise Up Labs, for informing us—without asking—about the sky we missed while we were busy staring at this digital snoop-fest, Vol. IV. Bravo, Matt, for teaching us that our devices are blabbermouths, one millisecond at a time. 😂👏
https://sinceyouarrived.world/taken #digitalprivacy #browsersecurity #techhumor #dataawareness #RiseUpLabs #HackerNews #ngated

📚🚀 Oh, how dare a webpage reveal that your browser's been gossiping all along! 🤭 Thanks, Rise Up Labs, for informing us—without asking—about the sky we missed while we were busy staring at this digital snoop-fest, Vol. IV. Bravo, Matt, for teaching us that our devices are blabbermouths, one millisecond at a time. 😂👏
https://sinceyouarrived.world/taken #digitalprivacy #browsersecurity #techhumor #dataawareness #RiseUpLabs #HackerNews #ngated

Microsoft Edge Exposes Saved Passwords in Plaintext

Microsoft Edge's password management has a concerning vulnerability: it loads all saved passwords into browser memory in plaintext at startup, making it easier for hackers to steal credentials on compromised systems. This is in stark contrast to other Chromium-based browsers like Google Chrome and Brave, which only decrypt…

https://osintsights.com/microsoft-edge-exposes-saved-passwords-in-plaintext?utm_source=mastodon&utm_medium=social

#BrowserSecurity #CredentialTheft #PlaintextPasswords #MicrosoftEdge #ChromiumbasedBrowsers

Microsoft Edge Exposes Saved Passwords in Cleartext

Storing passwords in plain text poses a significant risk, especially in shared environments, as a security researcher recently discovered that Microsoft Edge saves decrypted credentials in its memory, making them vulnerable to exposure. This flaw allows saved passwords to be accessible even when they're not in use.

https://osintsights.com/microsoft-edge-exposes-saved-passwords-in-cleartext?utm_source=mastodon&utm_medium=social

#BrowserSecurity #MicrosoftEdge #PasswordExposure #CleartextStorage #EmergingThreats

New by me: Chrome’s Silent Gemini Nano Download Has a Consent Problem

https://www.kylereddoch.me/blog/chromes-silent-gemini-nano-download-has-a-consent-problem/

#Cybersecurity #InfoSec #Privacy #GoogleChrome #Google #AI #BrowserSecurity #DigitalPrivacy #Surveillance #TechNews

Google Chrome adds approximate location sharing on Android, giving users more control over privacy

https://fed.brid.gy/r/https://nerds.xyz/2026/05/chrome-approximate-location-sharing/

Mozilla Firefox uses AI to hunt bugs and suddenly zero days do not feel so untouchable

https://fed.brid.gy/r/https://nerds.xyz/2026/04/firefox-ai-bug-hunting/

⚠️ Extensions hijack sessions instead of just stealing data At least 12 fake #TikTok downloader extensions inject scripts to capture Facebook session cookies, enabling full account takeover without credentials across Chrome and Edge installs. #ransomNews #BrowserSecurity #SessionHijacking

New by me: Secure Browsers Push Zero Trust Past the Login Screen

I wrote about why secure browsers matter beyond just getting a user signed in. If modern work happens in the browser, then trust decisions, session controls, and data protections need to keep happening there too.

https://www.kylereddoch.me/blog/secure-browsers-push-zero-trust-past-the-login-screen/

#Cybersecurity #Infosec #ZeroTrust #BrowserSecurity

😆 Oh, the irony! To learn about cutting-edge defense innovation, please enable JavaScript—because, clearly, the true fortresses of the modern age are browser settings. 🔒🍪
https://www.israeltechinsider.com/p/inside-israels-defense-innovation #defenseinnovation #browsersecurity #irony #moderntech #HackerNews #ngated

🚨 Google Chrome's latest update patches three critical security vulnerabilities, with other Chromium-based browsers also affected. Stay safe—update now! 🔒💻
https://www.heise.de/en/news/Chrome-Update-patches-three-critical-security-vulnerabilities-11218787.html
#ChromeUpdate #Cybersecurity #BrowserSecurity