#browsersecurity — Public Fediverse posts

Dark-Mode im Firefox trotz Finterprinting-Schutz

Der Mozilla Firefox verfügt bereits von Haus aus über einen sehr guten Schutz vor sogenanntem Fingerprinting. Dabei werden Webseiten daran gehindert, Nutzer eindeutig anhand technischer Merkmale ihres Browsers zu identifizieren.

Dieser Schutz hat allerdings einen Nebeneffekt, der mich lange Zeit gestört hat: Viele moderne Webseiten erkennen normalerweise automatisch, ob das Betriebssystem […]

#ActivityPubPlugin #blog #browsersecurity #dark #darkMode #datenschutz #FediBlog #fingerprinting #firefox #howTo #wordpressBlog #WordPressFederation

Link zum kompletten Beitrag: https://mapf.net/bx09

Dark-Mode im Firefox trotz Finterprinting-Schutz

Der Mozilla Firefox verfügt bereits von Haus aus über einen sehr guten Schutz vor sogenanntem Fingerprinting. Dabei werden Webseiten daran gehindert, Nutzer eindeutig anhand technischer Merkmale ihres Browsers zu identifizieren.

Dieser Schutz hat allerdings einen Nebeneffekt, der mich lange Zeit gestört hat: Viele moderne Webseiten erkennen normalerweise automatisch, ob das Betriebssystem […]

#ActivityPubPlugin #blog #browsersecurity #dark #darkMode #datenschutz #FediBlog #fingerprinting #firefox #howTo #wordpressBlog #WordPressFederation

Link zum kompletten Beitrag: https://mapf.net/bx09

Dark-Mode im Firefox trotz Finterprinting-Schutz

Der Mozilla Firefox verfügt bereits von Haus aus über einen sehr guten Schutz vor sogenanntem Fingerprinting. Dabei werden Webseiten daran gehindert, Nutzer eindeutig anhand technischer Merkmale ihres Browsers zu identifizieren.

Dieser Schutz hat allerdings einen Nebeneffekt, der mich lange Zeit gestört hat: Viele moderne Webseiten erkennen normalerweise automatisch, ob das Betriebssystem […]

#ActivityPubPlugin #blog #browsersecurity #dark #darkMode #datenschutz #FediBlog #fingerprinting #firefox #howTo #wordpressBlog #WordPressFederation

Link zum kompletten Beitrag: https://mapf.net/bx09

Dark-Mode im Firefox trotz Finterprinting-Schutz

Der Mozilla Firefox verfügt bereits von Haus aus über einen sehr guten Schutz vor sogenanntem Fingerprinting. Dabei werden Webseiten daran gehindert, Nutzer eindeutig anhand technischer Merkmale ihres Browsers zu identifizieren.

Dieser Schutz hat allerdings einen Nebeneffekt, der mich lange Zeit gestört hat: Viele moderne Webseiten erkennen normalerweise automatisch, ob das Betriebssystem […]

#ActivityPubPlugin #blog #browsersecurity #dark #darkMode #datenschutz #FediBlog #fingerprinting #firefox #howTo #wordpressBlog #WordPressFederation

Link zum kompletten Beitrag: https://mapf.net/bx09

Dark-Mode im Firefox trotz Finterprinting-Schutz

Der Mozilla Firefox verfügt bereits von Haus aus über einen sehr guten Schutz vor sogenanntem Fingerprinting. Dabei werden Webseiten daran gehindert, Nutzer eindeutig anhand technischer Merkmale ihres Browsers zu identifizieren.

Dieser Schutz hat allerdings einen Nebeneffekt, der mich lange Zeit gestört hat: Viele moderne Webseiten erkennen normalerweise automatisch, ob das Betriebssystem […]

#ActivityPubPlugin #blog #browsersecurity #dark #darkMode #datenschutz #FediBlog #fingerprinting #firefox #howTo #wordpressBlog #WordPressFederation

Link zum kompletten Beitrag: https://mapf.net/bx09

New by me: Microsoft Says It’s “By Design.” Edge’s Plaintext Password Behavior Is Still a Security Problem

https://www.kylereddoch.me/blog/microsoft-says-its-by-design-edges-plaintext-password-behavior-is-still-a-security-problem/

#Cybersecurity #InfoSec #BrowserSecurity #MicrosoftEdge

New by me: Claude’s Chrome Extension Flaw Shows Why Agentic Browsing Needs Real Guardrails

https://www.kylereddoch.me/blog/claudes-chrome-extension-flaw-shows-why-agentic-browsing-needs-real-guardrails/

#Cybersecurity #InfoSec #BrowserSecurity #ChromeExtensions #AISecurity #MSP

New by me: Claude’s Chrome Extension Flaw Shows Why Agentic Browsing Needs Real Guardrails

https://www.kylereddoch.me/blog/claudes-chrome-extension-flaw-shows-why-agentic-browsing-needs-real-guardrails/

#Cybersecurity #InfoSec #BrowserSecurity #ChromeExtensions #AISecurity #MSP

New by me: Claude’s Chrome Extension Flaw Shows Why Agentic Browsing Needs Real Guardrails

https://www.kylereddoch.me/blog/claudes-chrome-extension-flaw-shows-why-agentic-browsing-needs-real-guardrails/

#Cybersecurity #InfoSec #BrowserSecurity #ChromeExtensions #AISecurity #MSP

New by me: Claude’s Chrome Extension Flaw Shows Why Agentic Browsing Needs Real Guardrails

https://www.kylereddoch.me/blog/claudes-chrome-extension-flaw-shows-why-agentic-browsing-needs-real-guardrails/

#Cybersecurity #InfoSec #BrowserSecurity #ChromeExtensions #AISecurity #MSP

New by me: Claude’s Chrome Extension Flaw Shows Why Agentic Browsing Needs Real Guardrails

https://www.kylereddoch.me/blog/claudes-chrome-extension-flaw-shows-why-agentic-browsing-needs-real-guardrails/

#Cybersecurity #InfoSec #BrowserSecurity #ChromeExtensions #AISecurity #MSP

📚🚀 Oh, how dare a webpage reveal that your browser's been gossiping all along! 🤭 Thanks, Rise Up Labs, for informing us—without asking—about the sky we missed while we were busy staring at this digital snoop-fest, Vol. IV. Bravo, Matt, for teaching us that our devices are blabbermouths, one millisecond at a time. 😂👏
https://sinceyouarrived.world/taken #digitalprivacy #browsersecurity #techhumor #dataawareness #RiseUpLabs #HackerNews #ngated

New by me: Chrome’s Silent Gemini Nano Download Has a Consent Problem

https://www.kylereddoch.me/blog/chromes-silent-gemini-nano-download-has-a-consent-problem/

#Cybersecurity #InfoSec #Privacy #GoogleChrome #Google #AI #BrowserSecurity #DigitalPrivacy #Surveillance #TechNews

Google Chrome adds approximate location sharing on Android, giving users more control over privacy

https://fed.brid.gy/r/https://nerds.xyz/2026/05/chrome-approximate-location-sharing/

Mozilla Firefox uses AI to hunt bugs and suddenly zero days do not feel so untouchable

https://web.brid.gy/r/https://nerds.xyz/2026/04/firefox-ai-bug-hunting/

Mozilla Firefox uses AI to hunt bugs and suddenly zero days do not feel so untouchable

https://fed.brid.gy/r/https://nerds.xyz/2026/04/firefox-ai-bug-hunting/

Mozilla Firefox uses AI to hunt bugs and suddenly zero days do not feel so untouchable

https://fed.brid.gy/r/https://nerds.xyz/2026/04/firefox-ai-bug-hunting/

Mozilla Firefox uses AI to hunt bugs and suddenly zero days do not feel so untouchable

https://web.brid.gy/r/https://nerds.xyz/2026/04/firefox-ai-bug-hunting/

Wie Island Enterprise Browser vertrauenswürdige DLLs validiert: Einblick in die Implementierung

Welche DLLs darf ein sicherheitsorientierter Browser laden – und wie lässt sich das zuverlässig durchsetzen? Entwickler beim Island Enterprise Browser sind dieser Frage systematisch nachgegangen und haben dabei tief in Windows-Interna geschaut.

https://www.all-about-security.de/wie-island-enterprise-browser-vertrauenswuerdige-dlls-validiert-einblick-in-die-implementierung/

#browser #browsersecurity #DLLs

😆 Oh, the irony! To learn about cutting-edge defense innovation, please enable JavaScript—because, clearly, the true fortresses of the modern age are browser settings. 🔒🍪
https://www.israeltechinsider.com/p/inside-israels-defense-innovation #defenseinnovation #browsersecurity #irony #moderntech #HackerNews #ngated

🚨 Google Chrome's latest update patches three critical security vulnerabilities, with other Chromium-based browsers also affected. Stay safe—update now! 🔒💻
https://www.heise.de/en/news/Chrome-Update-patches-three-critical-security-vulnerabilities-11218787.html
#ChromeUpdate #Cybersecurity #BrowserSecurity

🚨 Google Chrome's latest update patches three critical security vulnerabilities, with other Chromium-based browsers also affected. Stay safe—update now! 🔒💻
https://www.heise.de/en/news/Chrome-Update-patches-three-critical-security-vulnerabilities-11218787.html
#ChromeUpdate #Cybersecurity #BrowserSecurity

🚨 Google Chrome's latest update patches three critical security vulnerabilities, with other Chromium-based browsers also affected. Stay safe—update now! 🔒💻
https://www.heise.de/en/news/Chrome-Update-patches-three-critical-security-vulnerabilities-11218787.html
#ChromeUpdate #Cybersecurity #BrowserSecurity

🚨 Google Chrome's latest update patches three critical security vulnerabilities, with other Chromium-based browsers also affected. Stay safe—update now! 🔒💻
https://www.heise.de/en/news/Chrome-Update-patches-three-critical-security-vulnerabilities-11218787.html
#ChromeUpdate #Cybersecurity #BrowserSecurity

🚨 Google Chrome's latest update patches three critical security vulnerabilities, with other Chromium-based browsers also affected. Stay safe—update now! 🔒💻
https://www.heise.de/en/news/Chrome-Update-patches-three-critical-security-vulnerabilities-11218787.html
#ChromeUpdate #Cybersecurity #BrowserSecurity

Proton Reports Malicious Proton VPN Impersonators in Chrome Web Store

Impact reportedly included:
• Credential harvesting
• Personal data collection
• Potential traffic relay
• Abuse of brand trust
Repeated reporting allegedly led to delayed removal.

Security takeaways:
• Extension ecosystems remain high-risk
• Search-based brand targeting is effective for attackers
• Store review latency increases exposure window

Community question:
Should browser vendors implement stricter publisher verification or cryptographic signing tied to corporate identity?

Source: https://cyberinsider.com/proton-warns-of-malicious-chrome-extensions-impersonating-its-vpn-service/

Engage below and follow @technadu for threat ecosystem analysis and digital trust reporting.

#ThreatIntel #BrowserSecurity #ExtensionSecurity #ProtonVPN #CyberRisk #AppStoreSecurity #Infosec #MalwareResearch

Part 3 of Everyday Defense is live: Browser hygiene that actually sticks.

Profiles (Daily/Work/Money/Admin), extension hygiene, anti-tracking settings that won’t wreck your day, and a simple safe-download routine.

🔗 https://www.kylereddoch.me/blog/cyberseckyle-security-how-to-series-everyday-defense-part-3-%E2%80%94-browser-hygiene-that-actually-sticks/

#CybersecKyleHowTo #EverydayDefense #BrowserSecurity #Privacy #InfoSec #BlueTeam #DigitalHygiene

https://winbuzzer.com/2025/12/23/openai-deploys-automated-attacker-to-harden-atlas-browser-admits-prompt-injection-is-unsolved-xcxwbn/

OpenAI Deploys Automated 'Attacker' to Harden Atlas Browser, Admits Prompt Injection Is 'Unsolved'

#AI #OpenAI #Cybersecurity #Security #AIAgents #AgenticAI #WebBrowsers #PromptInjection #ChatGPT #ChatGPTAtlas #RedTeaming #InfoSec #BrowserSecurity

🍪🤦 "Privacy is dead, long live anonymity!" they declare, while holding your digital hand through the grand labyrinth of cookie consent and JavaScript hoops. Because nothing screams 'anonymity' like begging your browser for permission to load a page! 🚪🔐
https://servury.com/blog/privacy-is-marketing-anonymity-is-architecture/ #Privacy #Anonymity #DigitalRights #CookieConsent #BrowserSecurity #HackerNews #ngated

Gemini for Chrome gets a second AI agent to watch over it https://www.csoonline.com/article/4103346/gemini-for-chrome-gets-a-second-ai-agent-to-watch-over-it-2.html #ArtificialIntelligence #EndpointProtection #BrowserSecurity #Security

Google details layered security for Chrome’s agentic AI, featuring a Gemini-powered "Critic."

Google is safeguarding Chrome's upcoming autonomous AI features with a "User Alignment Critic" model that vets every action for user safety, Origin Sets to prevent data leaks, and mandatory user confirmation for sensitive tasks like payments and banking access. These measures are designed to combat indirect prompt injection attacks.

#chromeai #agenticai #gemini #browsersecurity #promptinjection
9m

Neue bösartige Browser-Erweiterungen entdeckt https://www.csoonline.com/article/4100071/neue-bosartige-browser-erweiterungen-entdeckt.html #EndpointProtection #BrowserSecurity #Security

Newly discovered malicious extensions could be lurking in enterprise browsers https://www.csoonline.com/article/4099446/newly-discovered-malicious-extensions-could-be-lurking-in-enterprise-browsers.html #EndpointProtection #BrowserSecurity #Cybercrime #Security #Malware

AI browsers can be tricked with malicious prompts hidden in URL fragments https://www.csoonline.com/article/4097087/ai-browsers-can-be-tricked-with-malicious-prompts-hidden-in-url-fragments.html #ArtificialIntelligence #EndpointProtection #BrowserSecurity #Security

https://winbuzzer.com/2025/11/23/perplexity-calls-rce-vulnerability-fake-news-despite-evidence-of-silent-patch-xcxwbn

Perplexity Calls Comet RCE Vulnerability 'Fake News' Despite Evidence of Silent Patch

#AI #Cybersecurity #PerplexityAI #WebBrowsers #SecurityVulnerabilities #AgenticAI #RCE #Privacy #SquareX #CometBrowser #AISecurity #BrowserSecurity

Sneaky2FA phishing tool adds ability to insert legit-looking URLs https://www.csoonline.com/article/4094165/sneaky2fa-phishing-tool-adds-ability-to-insert-legit-looking-urls.html #EndpointProtection #SocialEngineering #BrowserSecurity #Cybercrime #Phishing #Security

https://winbuzzer.com/2025/11/19/google-issues-emergency-chrome-update-to-patch-active-zero-day-exploit-xcxwbn

Google Issues Emergency Chrome Update to Patch Active Zero-Day Exploit

#GoogleChrome #CyberSecurity #ZeroDay #InfoSec #Google #V8Engine #Exploit #BrowserSecurity #CVE202513223 #OnlineSafety

Hidden API in Comet AI browser raises security red flags for enterprises https://www.csoonline.com/article/4092995/hidden-api-in-comet-ai-browser-raises-security-red-flags-for-enterprises.html #EndpointProtection #BrowserSecurity #Security

More work for admins as Google patches latest zero-day Chrome vulnerability https://www.csoonline.com/article/4092287/more-work-for-admins-as-google-patches-latest-zero-day-chrome-vulnerability.html #Zero-DayVulnerabilities #EndpointProtection #BrowserSecurity #Vulnerabilities #Security

Mozilla Firefox 145 adds “Phase 2” anti-fingerprinting protections, cutting unique trackability to around 20%.
These new defenses standardize hardware, font, and screen info while adding image randomization - now in ETP Strict Mode and Private Browsing.
Mozilla says the challenge is maintaining usability while reducing data exposure.

#Firefox #Privacy #CyberSecurity #Fingerprinting #BrowserSecurity #ETP #DataProtection #InfoSec #TechNadu

Is your browser really safe? Hackers are outsmarting traditional sandboxes with crafty extensions and clever credential theft. It’s time to rethink security and add extra layers of protection.

https://thedefendopsdiaries.com/browser-sandboxing-evolving-threats-and-the-need-for-multi-layered-security/

#browsersecurity
#sandboxing
#cyberthreats
#credentialtheft
#maliciousextensions

Brash - architectural Blink flaw that enables Chromium collapse; defensive checklist

The Brash research highlights a core Blink design gap: unthrottled document.title updates can saturate the main thread. Impact spans desktop browsers, embedded Chromium runtimes and headless agents. Vendors are expected to patch; until then, defenders should:
• Inventory Chromium runtimes and headless agents.
• Add process-level CPU/latency alerts for browser processes.
• Monitor automation pipelines for simultaneous headless failures.
• Implement circuit breakers for critical UIs and fallbacks for automation.
• Harden email/portal gating to reduce timed-trigger links reaching many users simultaneously.

Share detection tactics you’ve tested. Follow @technadu for deeper coverage and technical playbooks.

#Infosec #ThreatIntel #Chromium #BrowserSecurity #EDR #Headless #AttackSurface

Brash - architectural Blink flaw that enables Chromium collapse; defensive checklist

The Brash research highlights a core Blink design gap: unthrottled document.title updates can saturate the main thread. Impact spans desktop browsers, embedded Chromium runtimes and headless agents. Vendors are expected to patch; until then, defenders should:
• Inventory Chromium runtimes and headless agents.
• Add process-level CPU/latency alerts for browser processes.
• Monitor automation pipelines for simultaneous headless failures.
• Implement circuit breakers for critical UIs and fallbacks for automation.
• Harden email/portal gating to reduce timed-trigger links reaching many users simultaneously.

Share detection tactics you’ve tested. Follow @technadu for deeper coverage and technical playbooks.

#Infosec #ThreatIntel #Chromium #BrowserSecurity #EDR #Headless #AttackSurface

Brash - architectural Blink flaw that enables Chromium collapse; defensive checklist

The Brash research highlights a core Blink design gap: unthrottled document.title updates can saturate the main thread. Impact spans desktop browsers, embedded Chromium runtimes and headless agents. Vendors are expected to patch; until then, defenders should:
• Inventory Chromium runtimes and headless agents.
• Add process-level CPU/latency alerts for browser processes.
• Monitor automation pipelines for simultaneous headless failures.
• Implement circuit breakers for critical UIs and fallbacks for automation.
• Harden email/portal gating to reduce timed-trigger links reaching many users simultaneously.

Share detection tactics you’ve tested. Follow @technadu for deeper coverage and technical playbooks.

#Infosec #ThreatIntel #Chromium #BrowserSecurity #EDR #Headless #AttackSurface

AI browsers can be abused by malicious AI sidebar extensions: Report https://www.csoonline.com/article/4078306/ai-browsers-can-be-abused-by-malicious-ai-sidebar-extensions-report-2.html #EndpointProtection #BrowserSecurity #Cybercrime #Security #Malware

Anthropic’s auto-clicking AI Chrome extension raises browser-hijacking concerns - As AI assistants become capable of controlling web browsers,... - https://arstechnica.com/information-technology/2025/08/new-ai-browser-agents-create-risks-if-sites-hijack-them-with-hidden-instructions/ #computerusemodel #promptinjections #aivulnerability #browsersecurity #chromeextension #machinelearning #simonwillison #webbrowsers #aisecurity #agenticai #anthropic #aiagents #aisafety #biz⁢ #claude #ai

💡Fun fact: Your computer’s battery status API can be used to track you.

Some websites ping battery levels to create a unique fingerprint, even in incognito mode. It’s subtle, creepy—and real.

🛡️ Quick fixes:
• Chrome: Install “Disable Battery API” extension
• Use Brave (built-in protection) or Firefox (already blocks this)

#TechPrivacy #WebTracking #BrowserSecurity

DeadSwitch Protocol: 06 - Browser is the Weakest Link: Cloak It or Be Seen #CyberSecurity #BrowserSecurity #Privacy #Anonymity #Tor #VPN #NoTracking #Infosec #ZeroTrust #Hardening #GhostOps #DeadSwitch #TomITCafe #DigitalAnonymity #OSINT #DarkWeb #FingerprintEvasion

http://tomsitcafe.com/2025/04/07/%f0%9f%94%8d-deadswitch-protocol-06-browser-is-the-weakest-link-cloak-it-or-be-seen/

This is crazy! Be careful with browser extensions that simulate payment tools, password managers, security tools, etc.

https://youtu.be/oWtR8vqbYX4

#PolymorphicExtensions #AttackVector #Cybersecurity #Infosec #BrowserSecurity

This is crazy! Be careful with browser extensions that simulate payment tools, password managers, security tools, etc.

https://youtu.be/oWtR8vqbYX4

#PolymorphicExtensions #AttackVector #Cybersecurity #Infosec #BrowserSecurity