News · via Dark Reading
ClickFix Attacks Evolve to Better Hide Malicious Payloads
Threat actors are now hiding payloads by using DNS TXT records and browser cache pre-fetching, making it tougher to spot early attack stages.
Browser
Coverage tagged "Browser".
News · via Cloudflare
The keys to the Internet change on October 11. Are you ready?
On October 11, 2026, the DNS root is scheduled to change its key-signing key (KSK) for only the second time ever. This key anchors DNSSEC’s chain of trust, which lets DNS resolvers authenticate…
News · via Infosecurity Magazine
ClickFix Attack Hides VBScript Payload in Browser Cache
ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog's length limit
News · via Chrome Releases
Beta Channel Update for ChromeOS / ChromeOS Flex
The Beta channel is being updated to OS version 16820.18.0 (Browser version 155.0.8059.31) for most ChromeOS devices. If you find new issues, please let us know one of the following ways: File a bug…
News · via BleepingComputer
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
Browser-based attacks can steal sessions, abuse extensions, or manipulate users without creating the endpoint artifacts EDR is designed to detect. NordLayer explains three ways attacks can evade…
News · via Cloudflare
2026 Birthday week: network performance update
Cloudflare is now the fastest provider in 74% of the 1,000 largest networks around the world, up from 60% in April 2026. This huge improvement matters because every millisecond affects how quickly…
News · via Chrome Releases
Dev Channel Update for ChromeOS / ChromeOS Flex
The Dev channel is being updated to OS version 16836.2.0 (Browser version 156.0.8078.5) for most ChromeOS devices. If you find new issues, please let us know one of the following ways File a bug…
News · via Cloudflare
AI Search is now generally available
Cloudflare’s AI Search combines Workers AI, Vectorize, R2, and Browser Run into a fully managed index and retrieval pipeline. Since we launched AI Search over a year ago, we’ve seen developers use it…
News · via The Hacker News
Know Your Enemy: Browser-Based Attack Techniques in 2026
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it…
News · via arXiv cs.CR
GenomeOcean Anywhere: Private WebGPU Inference for Genome MoEs
arXiv:2609.35882v1 Announce Type: new Abstract: Genome foundation models are most useful where sequences are generated, yet the largest models need datacenter accelerators and a place to send private…
News · via SecurityWeek
New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks
Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel
News · via The Hacker News
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in web browsers…
News · via Help Net Security
LastPass warns employees before they share sensitive data with AI tools
LastPass has announced an expansion of its Business Max offering to include AI Monitoring & Protect and Web Monitoring & Protect, new visibility and governance capabilities that enable organizations…
News · via arXiv cs.CR
AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents
arXiv:2609.32915v1 Announce Type: new Abstract: Browser-use agents often carry information in their context as they move between websites. While it may be necessary for task completion, it also…