Cybersecurity articles tagged #Google Chrome on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/chrome-151-update-patches-41-critical-high-severity-flawshttps://runtimerebel.com/blog/chrome-151-update-patches-41-critical-high-severity-flawsGoogle's Chrome 151 update addresses 41 critical and high-severity vulnerabilities, including memory safety bugs potentially leading to RCE.Sun, 09 Aug 2026 16:24:44 GMTGoogle ChromeVulnerabilitiesMemory SafetyUse After FreeOut of Bounds Writehttps://runtimerebel.com/blog/google-chrome-blocks-malicious-new-tab-hijacker-extensions-on-unmanaged-deviceshttps://runtimerebel.com/blog/google-chrome-blocks-malicious-new-tab-hijacker-extensions-on-unmanaged-devicesGoogle Chrome will soon block policy-installed extensions from hijacking the New Tab page or changing the default search engine on unmanaged Windows and macOS devices.Sun, 02 Aug 2026 16:48:04 GMTGoogle ChromeBrowser SecurityMalwareExtensionsHijackinghttps://runtimerebel.com/blog/google-chrome-updates-resolve-1442-security-flawshttps://runtimerebel.com/blog/google-chrome-updates-resolve-1442-security-flawsGoogle Chrome recently addressed 1,442 security flaws across versions 149, 150, and 151. Learn why immediate updates are crucial for user security.Fri, 31 Jul 2026 17:41:44 GMTGoogle ChromeBrowser SecurityVulnerability PatchingSecurity Updatehttps://runtimerebel.com/blog/ai-powered-vulnerability-research-google-patches-1000-chrome-bugshttps://runtimerebel.com/blog/ai-powered-vulnerability-research-google-patches-1000-chrome-bugsGoogle utilizes Big Sleep AI to identify and remediate over 1,000 security vulnerabilities in Chrome releases, signaling a shift in automated bug hunting.Thu, 30 Jul 2026 17:30:44 GMTGoogle ChromeBig SleepVulnerability ResearchProject ZeroArtificial Intelligencehttps://runtimerebel.com/blog/chrome-security-update-and-sonicwall-targeted-in-ai-driven-campaignshttps://runtimerebel.com/blog/chrome-security-update-and-sonicwall-targeted-in-ai-driven-campaignsAnalysis of 370 Chrome vulnerabilities and active SonicWall targeting, highlighting the rise of AI-powered phishing and automated DNS hijacking threats.Thu, 30 Jul 2026 17:29:33 GMTGoogle ChromeSonicWallAI Powered HackingDNS HijackingPhishinghttps://runtimerebel.com/blog/chrome-150-update-patching-27-vulnerabilities-critical-use-after-free-flawshttps://runtimerebel.com/blog/chrome-150-update-patching-27-vulnerabilities-critical-use-after-free-flawsGoogle Chrome 150 update patches 27 vulnerabilities, including two critical use-after-free bugs.Thu, 09 Jul 2026 07:44:34 GMTChrome 150Use After FreeBrowser SecurityVulnerability PatchingGoogle Chromehttps://runtimerebel.com/blog/chrome-149-update-patches-18-high-severity-uaf-vulnerabilitieshttps://runtimerebel.com/blog/chrome-149-update-patches-18-high-severity-uaf-vulnerabilitiesGoogle releases Chrome 149 to address 18 severe vulnerabilities, including multiple use-after-free defects in Graphics, Dawn, and Mojo components.Thu, 25 Jun 2026 09:15:58 GMTGoogle ChromeCVE-2024-11812Use After FreeBrowser SecurityRCEhttps://runtimerebel.com/blog/chrome-149-update-patches-28-vulnerabilities-mitigation-guidehttps://runtimerebel.com/blog/chrome-149-update-patches-28-vulnerabilities-mitigation-guideGoogle addresses 28 security flaws in Chrome 149, including critical use-after-free bugs. Learn about technical impacts and enterprise patching requirements.Fri, 12 Jun 2026 09:36:27 GMTGoogle ChromeChrome 149Use After FreeMemory CorruptionBrowser Securityhttps://runtimerebel.com/blog/google-patches-cve-2026-11645-5th-chrome-zero-day-exploited-in-2026https://runtimerebel.com/blog/google-patches-cve-2026-11645-5th-chrome-zero-day-exploited-in-2026Google addresses CVE-2026-11645, a critical zero-day vulnerability in Chrome being actively exploited. Learn about patch guidance and detection strategies.Tue, 09 Jun 2026 09:17:29 GMTCVE-2026-11645Google ChromeZero-DayBrowser Securityhttps://runtimerebel.com/blog/cve-2024-4947-google-patches-fifth-chrome-zero-day-of-2024https://runtimerebel.com/blog/cve-2024-4947-google-patches-fifth-chrome-zero-day-of-2024Google addresses CVE-2024-4947, a high-severity V8 type confusion vulnerability in Chrome being exploited in the wild. Update to version 125.0.6422.60 now.Tue, 09 Jun 2026 09:16:53 GMTCVE-2024-4947Google ChromeV8 EngineZero-DayKasperskyhttps://runtimerebel.com/blog/google-chrome-dbsc-preventing-account-takeover-via-cookie-thefthttps://runtimerebel.com/blog/google-chrome-dbsc-preventing-account-takeover-via-cookie-theftGoogle Chrome rolls out Device Bound Session Credentials (DBSC) to protect users from session hijacking by cryptographically binding cookies to hardware.Fri, 29 May 2026 13:17:47 GMTGoogle ChromeDBSCSession HijackingIdentity TheftTPMhttps://runtimerebel.com/blog/chrome-148-update-patching-critical-use-after-free-vulnerabilitieshttps://runtimerebel.com/blog/chrome-148-update-patching-critical-use-after-free-vulnerabilitiesGoogle releases Chrome 148 addressing critical-severity use-after-free vulnerabilities.Fri, 15 May 2026 09:12:15 GMTChrome 148ChromiumUse After FreeMemory CorruptionGoogle Chromehttps://runtimerebel.com/blog/google-chrome-abe-bypass-heightened-infostealer-threathttps://runtimerebel.com/blog/google-chrome-abe-bypass-heightened-infostealer-threatVoidStealer Trojan authors bypass Google Chrome's App-Bound Encryption (ABE), enabling infostealers to exfiltrate cookies and credentials from users.Thu, 07 May 2026 00:51:02 GMTGoogle ChromeApp Bound EncryptionABE BypassVoidStealerInfostealerData Exfiltrationhttps://runtimerebel.com/blog/april-2026-patch-tuesday-sharepoint-zero-day-bluehammer-adobe-rcehttps://runtimerebel.com/blog/april-2026-patch-tuesday-sharepoint-zero-day-bluehammer-adobe-rceMicrosoft's April 2026 Patch Tuesday addresses 167 vulnerabilities, including a SharePoint Server zero-day, Windows Defender 'BlueHammer' flaw, and an actively exploited…Wed, 15 Apr 2026 00:45:50 GMTMicrosoftWindowsSharePoint ServerWindows DefenderAdobe ReaderGoogle ChromePatch TuesdayZero-DayRCEBlueHammerVulnerabilityExploitationhttps://runtimerebel.com/blog/chrome-dbsc-securing-session-cookies-with-device-binding-analysishttps://runtimerebel.com/blog/chrome-dbsc-securing-session-cookies-with-device-binding-analysisGoogle introduces Device Bound Session Credentials in Chrome to combat session hijacking by cryptographically linking authentication cookies to local hardware.Fri, 10 Apr 2026 08:38:17 GMTGoogle ChromeDBSCSession HijackingCookie TheftInfostealerhttps://runtimerebel.com/blog/google-chrome-146-dbsc-implementation-hardens-windows-against-session-hijackinghttps://runtimerebel.com/blog/google-chrome-146-dbsc-implementation-hardens-windows-against-session-hijackingGoogle releases Device Bound Session Credentials (DBSC) in Chrome 146 for Windows to mitigate cookie theft and session hijacking via hardware-backed security.Fri, 10 Apr 2026 08:37:21 GMTGoogle ChromeDBSCSession HijackingCookie TheftTPMWindows Securityhttps://runtimerebel.com/blog/chrome-zero-day-and-fortinet-exploits-weekly-threat-intelligencehttps://runtimerebel.com/blog/chrome-zero-day-and-fortinet-exploits-weekly-threat-intelligenceIntelligence analysis of the latest Chrome zero-day, Fortinet vulnerabilities, and the Axios security breach, including technical remediation for SOC teams.Mon, 06 Apr 2026 16:20:58 GMTGoogle ChromeFortinetAxios HackParagon SpywareZero-Dayhttps://runtimerebel.com/blog/voidstealer-bypassing-chrome-abe-via-remote-debugging-protocolhttps://runtimerebel.com/blog/voidstealer-bypassing-chrome-abe-via-remote-debugging-protocolVoidStealer malware uses a novel debugger technique to bypass Google Chrome’s Application-Bound Encryption and exfiltrate browser-stored credentials.Sun, 22 Mar 2026 16:10:10 GMTVoidStealerGoogle ChromeApplication Bound EncryptionInfostealerCredential Thefthttps://runtimerebel.com/blog/quantum-safe-https-improving-web-latency-with-nist-pqc-standardshttps://runtimerebel.com/blog/quantum-safe-https-improving-web-latency-with-nist-pqc-standardsLeading web providers are testing quantum-safe HTTPS protocols that reduce certificate sizes by 90%, improving latency while securing data against Q-day.Fri, 20 Mar 2026 08:18:54 GMTPost Quantum CryptographyNist StandardsMl KemMl DsaGoogle ChromeCloudflarehttps://runtimerebel.com/blog/google-patches-chrome-zero-days-cve-2026-3909-in-skia-and-v8https://runtimerebel.com/blog/google-patches-chrome-zero-days-cve-2026-3909-in-skia-and-v8Google addresses two high-severity Chrome zero-days, including CVE-2026-3909, exploited in the wild via Skia and V8. Learn how to secure your browser now.Fri, 13 Mar 2026 12:18:07 GMTCVE-2026-3909Google ChromeSkiaV8Zero-Dayhttps://runtimerebel.com/blog/google-chrome-two-week-release-cycle-reducing-the-patch-gaphttps://runtimerebel.com/blog/google-chrome-two-week-release-cycle-reducing-the-patch-gapGoogle transitions Chrome to a two-week stable release cycle to accelerate security patching and minimize the window for n-day vulnerability exploitation.Tue, 03 Mar 2026 20:12:17 GMTGoogle ChromePatch ManagementChromiumBrowser Securityhttps://runtimerebel.com/blog/chrome-to-adopt-merkle-tree-certificates-for-post-quantum-httpshttps://runtimerebel.com/blog/chrome-to-adopt-merkle-tree-certificates-for-post-quantum-httpsGoogle introduces Merkle Tree Certificates in Chrome to enable quantum-resistant HTTPS, addressing scalability issues found in traditional X.509 PQC signatures.Mon, 02 Mar 2026 20:13:15 GMTGoogle ChromePost Quantum CryptographyMerkle TreesHTTPSCybersecurity Researchhttps://runtimerebel.com/blog/cve-2026-0628-chrome-gemini-panel-exploit-enables-privilege-escalationhttps://runtimerebel.com/blog/cve-2026-0628-chrome-gemini-panel-exploit-enables-privilege-escalationA high-severity flaw in Google Chrome's Gemini side panel allowed malicious extensions to bypass security policies and access local files on target systems.Mon, 02 Mar 2026 20:12:51 GMTCVE-2026-0628Google ChromePrivilege EscalationGeminiBrowser Securityhttps://runtimerebel.com/blog/chrome-gemini-live-hijacking-malicious-extension-vulnerabilityhttps://runtimerebel.com/blog/chrome-gemini-live-hijacking-malicious-extension-vulnerabilityA vulnerability in Google Chrome’s Gemini Live AI assistant allowed malicious extensions to hijack sessions and steal user files. Learn more about the impact.Mon, 02 Mar 2026 16:19:21 GMTGoogle ChromeGemini LiveAI SecurityBrowser ExtensionsData Exfiltrationhttps://runtimerebel.com/blog/googles-path-to-quantum-safe-chrome-https-via-merkle-tree-certificateshttps://runtimerebel.com/blog/googles-path-to-quantum-safe-chrome-https-via-merkle-tree-certificatesGoogle is developing Merkle Tree Certificates (MTCs) for Chrome to transition the web toward post-quantum cryptography and enhance HTTPS certificate security.Mon, 02 Mar 2026 12:18:59 GMTGoogle ChromePost Quantum CryptographyMerkle Tree CertificatesHTTPSPKI