Cybersecurity articles tagged #Browser Security on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/malicious-chrome-vpn-extensions-route-traffic-via-socks5-proxieshttps://runtimerebel.com/blog/malicious-chrome-vpn-extensions-route-traffic-via-socks5-proxiesOver 730 free Chrome VPN extensions are redirecting user browser traffic through SOCKS5 proxies, enabling man-in-the-middle attacks and data interception.Wed, 12 Aug 2026 16:46:46 GMTChrome ExtensionsVPNMan-in-the-MiddleBrowser SecurityProxyhttps://runtimerebel.com/blog/ai-browser-prompt-injection-flaws-defeat-vendor-guardrailshttps://runtimerebel.com/blog/ai-browser-prompt-injection-flaws-defeat-vendor-guardrailsNew security research reveals that AI-powered web browsers remain susceptible to persistent prompt injection flaws despite guardrails.Sun, 09 Aug 2026 16:25:35 GMTArtificial IntelligenceBrowser SecurityZero-DayApplication Securityhttps://runtimerebel.com/blog/google-chrome-blocks-malicious-new-tab-hijacker-extensions-on-unmanaged-deviceshttps://runtimerebel.com/blog/google-chrome-blocks-malicious-new-tab-hijacker-extensions-on-unmanaged-devicesGoogle Chrome will soon block policy-installed extensions from hijacking the New Tab page or changing the default search engine on unmanaged Windows and macOS devices.Sun, 02 Aug 2026 16:48:04 GMTGoogle ChromeBrowser SecurityMalwareExtensionsHijackinghttps://runtimerebel.com/blog/google-chrome-updates-resolve-1442-security-flawshttps://runtimerebel.com/blog/google-chrome-updates-resolve-1442-security-flawsGoogle Chrome recently addressed 1,442 security flaws across versions 149, 150, and 151. Learn why immediate updates are crucial for user security.Fri, 31 Jul 2026 17:41:44 GMTGoogle ChromeBrowser SecurityVulnerability PatchingSecurity Updatehttps://runtimerebel.com/blog/javascript-smuggling-in-memory-malware-assembly-evades-defenseshttps://runtimerebel.com/blog/javascript-smuggling-in-memory-malware-assembly-evades-defensesAttackers use JavaScript Smuggling and Blob objects to assemble infostealer malware in-memory, bypassing security filters on fake crypto and trading sites.Sat, 25 Jul 2026 16:59:37 GMTJavascript SmugglingInfostealerBrowser SecurityVidarStealChttps://runtimerebel.com/blog/anthropic-claude-chrome-extension-malicious-ai-action-triggerhttps://runtimerebel.com/blog/anthropic-claude-chrome-extension-malicious-ai-action-triggerA flaw in Anthropic's Claude for Chrome extension enables malicious extensions to trigger AI actions, potentially abusing access to connected services like Gmail, Google…Thu, 16 Jul 2026 21:02:07 GMTAnthropicClaudeChrome ExtensionAIBrowser SecurityAPI Abusehttps://runtimerebel.com/blog/sase-ai-blind-spot-why-packet-inspection-fails-modern-workflowshttps://runtimerebel.com/blog/sase-ai-blind-spot-why-packet-inspection-fails-modern-workflowsEnterprise data leakage via generative AI tools and browser extensions exposes critical flaws in traditional SASE models that rely solely on packet inspection.Wed, 15 Jul 2026 13:46:55 GMTSASEGenAIData LeakageBrowser SecurityDLPhttps://runtimerebel.com/blog/chrome-150-update-patching-27-vulnerabilities-critical-use-after-free-flawshttps://runtimerebel.com/blog/chrome-150-update-patching-27-vulnerabilities-critical-use-after-free-flawsGoogle Chrome 150 update patches 27 vulnerabilities, including two critical use-after-free bugs.Thu, 09 Jul 2026 07:44:34 GMTChrome 150Use After FreeBrowser SecurityVulnerability PatchingGoogle Chromehttps://runtimerebel.com/blog/duckduckgo-browser-enhances-privacy-with-youtube-ad-blockinghttps://runtimerebel.com/blog/duckduckgo-browser-enhances-privacy-with-youtube-ad-blockingDuckDuckGo's privacy-focused browser now blocks most YouTube video ads, bolstering user privacy against tracking and unwanted commercial interruptions.Wed, 08 Jul 2026 14:15:45 GMTDuckDuckGoYouTubeAd BlockingPrivacyTrackingBrowser Securityhttps://runtimerebel.com/blog/opera-gx-mod-auto-installation-vulnerability-analysishttps://runtimerebel.com/blog/opera-gx-mod-auto-installation-vulnerability-analysisA critical flaw in Opera GX allowed malicious sites to auto-install mods and exfiltrate sensitive data. Learn how to detect and mitigate this browser threat.Mon, 06 Jul 2026 08:26:02 GMTOpera GXBrowser SecurityInformation DisclosureMalicious Add Onshttps://runtimerebel.com/blog/malicious-perplexity-chrome-extension-intercepts-user-datahttps://runtimerebel.com/blog/malicious-perplexity-chrome-extension-intercepts-user-dataA malicious Chrome extension impersonating Perplexity AI intercepted user search queries and address bar inputs, routing them via attacker infrastructure, posing a…Mon, 29 Jun 2026 20:41:15 GMTChrome ExtensionPerplexity AIData InterceptionBrowser SecurityMicrosoft Threat IntelligenceGoogle Chrome Web Storehttps://runtimerebel.com/blog/microsoft-pulls-119-malicious-stegoad-edge-extensionshttps://runtimerebel.com/blog/microsoft-pulls-119-malicious-stegoad-edge-extensionsMicrosoft removes 119 Edge extensions linked to the StegoAd campaign, which used steganography in images and fonts to steal credentials and commit ad fraud.Mon, 29 Jun 2026 09:51:08 GMTMicrosoft EdgeStegoAdBrowser SecuritySteganographyAdwarehttps://runtimerebel.com/blog/adblock-for-youtube-extension-dormant-script-injection-threathttps://runtimerebel.com/blog/adblock-for-youtube-extension-dormant-script-injection-threatA popular Chrome ad blocker, "Adblock for YouTube," with over 10 million installs, contains a dormant capability for arbitrary JavaScript injection.Thu, 25 Jun 2026 17:17:00 GMTChrome ExtensionAdblock for YouTubeScript InjectionJavaScriptBrowser SecuritySupply ChainMalicious Extensionhttps://runtimerebel.com/blog/chrome-149-update-patches-18-high-severity-uaf-vulnerabilitieshttps://runtimerebel.com/blog/chrome-149-update-patches-18-high-severity-uaf-vulnerabilitiesGoogle releases Chrome 149 to address 18 severe vulnerabilities, including multiple use-after-free defects in Graphics, Dawn, and Mojo components.Thu, 25 Jun 2026 09:15:58 GMTGoogle ChromeCVE-2024-11812Use After FreeBrowser SecurityRCEhttps://runtimerebel.com/blog/malicious-chrome-wallpaper-extensions-distribute-adwarehttps://runtimerebel.com/blog/malicious-chrome-wallpaper-extensions-distribute-adwareAnalysis of 152 malicious Chrome wallpaper extensions distributing adware and generating fake traffic. Over 105K installs across 38 publisher accounts.Mon, 15 Jun 2026 14:21:57 GMTChrome ExtensionsAdwarePUPBrowser SecurityFake TrafficMalicious Extensionshttps://runtimerebel.com/blog/chrome-149-update-patches-28-vulnerabilities-mitigation-guidehttps://runtimerebel.com/blog/chrome-149-update-patches-28-vulnerabilities-mitigation-guideGoogle addresses 28 security flaws in Chrome 149, including critical use-after-free bugs. Learn about technical impacts and enterprise patching requirements.Fri, 12 Jun 2026 09:36:27 GMTGoogle ChromeChrome 149Use After FreeMemory CorruptionBrowser Securityhttps://runtimerebel.com/blog/google-patches-cve-2026-11645-5th-chrome-zero-day-exploited-in-2026https://runtimerebel.com/blog/google-patches-cve-2026-11645-5th-chrome-zero-day-exploited-in-2026Google addresses CVE-2026-11645, a critical zero-day vulnerability in Chrome being actively exploited. Learn about patch guidance and detection strategies.Tue, 09 Jun 2026 09:17:29 GMTCVE-2026-11645Google ChromeZero-DayBrowser Securityhttps://runtimerebel.com/blog/2026-verizon-dbir-analysis-securing-the-browser-against-phishinghttps://runtimerebel.com/blog/2026-verizon-dbir-analysis-securing-the-browser-against-phishingThe 2026 Verizon DBIR identifies browser-layer security gaps as a primary threat vector, highlighting risks from phishing, shadow AI, and malicious extensions.Fri, 05 Jun 2026 16:56:11 GMTVerizon DBIRBrowser SecurityPhishingCredential TheftShadow AIhttps://runtimerebel.com/blog/brave-origin-reducing-browser-attack-surface-via-paid-minimalismhttps://runtimerebel.com/blog/brave-origin-reducing-browser-attack-surface-via-paid-minimalismBrave Software launches Brave Origin, a subscription-based minimalist browser that removes AI, crypto, and VPN features to prioritize privacy and performance.Fri, 05 Jun 2026 01:00:35 GMTBrave OriginBrowser SecurityAttack Surface ReductionPrivacy ToolsChromiumhttps://runtimerebel.com/blog/chromium-rce-risk-unfixed-flaw-allows-background-javascripthttps://runtimerebel.com/blog/chromium-rce-risk-unfixed-flaw-allows-background-javascriptGoogle accidentally exposed details of an unfixed Chromium flaw. This enables RCE via persistent background JavaScript execution, affecting many browsers.Thu, 21 May 2026 20:40:55 GMTChromiumRCEJavaScriptBrowser SecurityGoogleZero-Dayhttps://runtimerebel.com/blog/microsoft-edge-hardening-against-cleartext-password-exposurehttps://runtimerebel.com/blog/microsoft-edge-hardening-against-cleartext-password-exposureMicrosoft Edge will no longer load cleartext passwords into memory at startup, mitigating a significant local credential access risk for users.Fri, 15 May 2026 16:41:38 GMTMicrosoft EdgeBrowser SecurityCleartext PasswordsCredential TheftMemory SecuritySecurity Hardeninghttps://runtimerebel.com/blog/bypassing-enterprise-dlp-via-browser-based-data-exfiltrationhttps://runtimerebel.com/blog/bypassing-enterprise-dlp-via-browser-based-data-exfiltrationExamine how modern SaaS workflows and generative AI prompts bypass traditional DLP, creating significant visibility gaps in enterprise security posture.Thu, 07 May 2026 16:41:43 GMTDLPData ExfiltrationSaaS SecurityGenAI RiskBrowser Securityhttps://runtimerebel.com/blog/microsoft-edge-cleartext-password-exposure-risks-mitigation-guidehttps://runtimerebel.com/blog/microsoft-edge-cleartext-password-exposure-risks-mitigation-guideCritical analysis of Microsoft Edge credential storage risks. Learn how to prevent cleartext password extraction and secure browser-based identities.Tue, 05 May 2026 12:39:48 GMTMicrosoft EdgeCredential TheftBrowser SecurityWindows DPAPIhttps://runtimerebel.com/blog/firefox-150-patch-271-zero-days-found-via-claude-mythos-update-nowhttps://runtimerebel.com/blog/firefox-150-patch-271-zero-days-found-via-claude-mythos-update-nowFirefox 150 addresses 271 vulnerabilities discovered by Anthropic’s Claude Mythos AI model, highlighting a shift in automated vulnerability discovery.Wed, 29 Apr 2026 12:42:45 GMTFirefoxAnthropicClaude MythosMozillaAI SecurityBrowser Securityhttps://runtimerebel.com/blog/python-infostealer-targeting-browser-credentials-and-discord-tokenshttps://runtimerebel.com/blog/python-infostealer-targeting-browser-credentials-and-discord-tokensTechnical analysis of a Python-based infostealer leveraging Discord webhooks for exfiltration, targeting browser credentials and session tokens.Tue, 21 Apr 2026 08:46:00 GMTPython MalwareInfostealerDiscord WebhooksCredential TheftBrowser Securityhttps://runtimerebel.com/blog/securing-enterprise-browser-environments-against-ai-extension-riskshttps://runtimerebel.com/blog/securing-enterprise-browser-environments-against-ai-extension-risksDiscover the security blind spots of AI browser extensions and how to mitigate data exfiltration risks in corporate environments via managed policies.Fri, 10 Apr 2026 12:25:18 GMTBrowser SecurityAI ThreatsShadow AIData ExfiltrationLayerXhttps://runtimerebel.com/blog/google-chrome-zero-day-patch-fourth-in-the-wild-exploithttps://runtimerebel.com/blog/google-chrome-zero-day-patch-fourth-in-the-wild-exploitGoogle has released an urgent security update for Chrome, patching the fourth zero-day vulnerability actively exploited in 2024. Update now to protect against…Wed, 01 Apr 2026 12:27:55 GMTChromeZero-DayBrowser SecurityGoogleVulnerabilityExploitationhttps://runtimerebel.com/blog/deepload-malware-leverages-clickfix-wmi-for-browser-credential-thefthttps://runtimerebel.com/blog/deepload-malware-leverages-clickfix-wmi-for-browser-credential-theftDeepLoad malware leverages ClickFix social engineering and WMI for persistence to steal browser credentials, employing AI-assisted obfuscation for evasion.Mon, 30 Mar 2026 20:18:04 GMTDeepLoadClickFixWMICredential TheftMalware LoaderBrowser SecuritySocial Engineeringhttps://runtimerebel.com/blog/firefox-149-integrated-vpn-analysis-of-privacy-and-security-featureshttps://runtimerebel.com/blog/firefox-149-integrated-vpn-analysis-of-privacy-and-security-featuresMozilla introduces a built-in VPN in Firefox 149 with a 50GB monthly data cap, enhancing user privacy while creating new visibility challenges for SOC teams.Tue, 24 Mar 2026 20:19:18 GMTMozilla FirefoxFirefox 149VPNBrowser SecurityPrivacy Toolshttps://runtimerebel.com/blog/glassworm-malware-detecting-obfuscated-payloads-in-browser-extensionshttps://runtimerebel.com/blog/glassworm-malware-detecting-obfuscated-payloads-in-browser-extensionsTechnical analysis of GlassWorm (ChromeLoader) evolution, detailing how the malware hides malicious JavaScript within legitimate browser extension dependencies.Tue, 17 Mar 2026 00:33:59 GMTGlassWormChromeLoaderBrowser SecurityJavascript ObfuscationInfostealerhttps://runtimerebel.com/blog/chrome-extensions-quicklens-and-buildmelon-hijacked-via-ownership-transferhttps://runtimerebel.com/blog/chrome-extensions-quicklens-and-buildmelon-hijacked-via-ownership-transferAttackers are exploiting Chrome extension ownership transfers to weaponize QuickLens and BuildMelon tools for code injection and data harvesting.Mon, 09 Mar 2026 12:18:29 GMTChrome ExtensionBrowser SecuritySupply Chain AttackQuickLensBuildMelonData Thefthttps://runtimerebel.com/blog/firefox-148-security-update-anthropic-ai-uncovers-22-vulnerabilitieshttps://runtimerebel.com/blog/firefox-148-security-update-anthropic-ai-uncovers-22-vulnerabilitiesAnthropic's Claude Opus 4.6 AI model identified 22 security vulnerabilities in Firefox, including 14 high-severity flaws addressed in the version 148 release.Sat, 07 Mar 2026 20:09:17 GMTFirefoxAnthropicClaude Opus 4 6MozillaBrowser SecurityAI Securityhttps://runtimerebel.com/blog/enterprise-browser-security-emerging-blind-spots-ai-web-tool-riskshttps://runtimerebel.com/blog/enterprise-browser-security-emerging-blind-spots-ai-web-tool-risksKeep Aware's 2026 report reveals critical enterprise browser security gaps, citing AI web tool use, phishing, and extensions as major blind spots for defenders.Thu, 05 Mar 2026 16:25:36 GMTBrowser SecurityEnterprise SecurityPhishingMalicious ExtensionsAI Web ToolsSocial EngineeringKeep Aware Reporthttps://runtimerebel.com/blog/google-chrome-two-week-release-cycle-reducing-the-patch-gaphttps://runtimerebel.com/blog/google-chrome-two-week-release-cycle-reducing-the-patch-gapGoogle transitions Chrome to a two-week stable release cycle to accelerate security patching and minimize the window for n-day vulnerability exploitation.Tue, 03 Mar 2026 20:12:17 GMTGoogle ChromePatch ManagementChromiumBrowser Securityhttps://runtimerebel.com/blog/cve-2026-0628-chrome-gemini-panel-exploit-enables-privilege-escalationhttps://runtimerebel.com/blog/cve-2026-0628-chrome-gemini-panel-exploit-enables-privilege-escalationA high-severity flaw in Google Chrome's Gemini side panel allowed malicious extensions to bypass security policies and access local files on target systems.Mon, 02 Mar 2026 20:12:51 GMTCVE-2026-0628Google ChromePrivilege EscalationGeminiBrowser Security