Google’s AI-powered detection tool, #BigSleep has discovered a critical Chrome vulnerability (CVE‑2025‑9478), earning a high 9.8 CVSS rating. Keep your Chrome browser updated!
Read: https://hackread.com/google-big-sleep-ai-tool-critical-chrome-vulnerability/
Here we go! DOJ says Google has to sell off Chrome. This is gonna get a bit wild. https://arstechnica.com/google/2025/03/doj-google-must-sell-chrome-android-could-be-next/
New Chrome 0-Day (CVE-2025-9478)
Critical use-after-free flaw in Chrome’s ANGLE library allows arbitrary code execution. Full system compromise is possible.
Update Chrome to v139.0.7258.154/.155+
Use EDR, browser isolation, and CSP.
#CyberSecurity #Chrome #0day #InfoSec
"Within Anthropic, we've seen appreciable improvements using early versions of Claude for Chrome to manage calendars, schedule meetings, draft email responses, handle routine expense reports, and test new website features.
However, some vulnerabilities remain to be fixed before we can make Claude for Chrome generally available. Just as people encounter phishing attempts in their inboxes, browser-using AIs face prompt injection attacks—where malicious actors hide instructions in websites, emails, or documents to trick AIs into harmful actions without users' knowledge (like hidden text saying "disregard previous instructions and do [malicious action] instead").
Prompt injection attacks can cause AIs to delete files, steal data, or make financial transactions. This isn't speculation: we’ve run “red-teaming” experiments to test Claude for Chrome and, without mitigations, we’ve found some concerning results.
We conducted extensive adversarial prompt injection testing, evaluating 123 test cases representing 29 different attack scenarios. Browser use without our safety mitigations showed a 23.6% attack success rate when deliberately targeted by malicious actors."
Ohhh. I missed this so far.
I think this makes sense: browsers are one of *the* most fundamental digital public goods at this point. (Right after a mobile OS.)
I'd have preferred if they had picked #Firefox or #Verso, but hey, poking #Google gets my vote too 
(Is #Ecosia the best host? Probably not; I'd see this as a @sovtechfund
@nlnet et al project.)
https://www.reuters.com/business/germanys-ecosia-proposes-stewardship-run-google-chrome-2025-08-21/
Google Chrome: Update schließt kritische Sicherheitslücke
Im Webbrowser Chrome haben die Entwickler eine kritische Sicherheitslücke entdeckt. Ein Update stopft sie.
heise+ | Wie Sie nervige Werbung und Tracking auf dem Desktop ausradieren
Wir zeigen Ihnen, wie diskret gängige Browser von Haus aus sind und wie Sie Ihre Privatsphäre auf Ihrem Desktop-PC zusätzlich schützen.
Claude for Chrome
Link: https://claude.ai/chrome
Discussion: https://news.ycombinator.com/item?id=45030760
Wenn es um Nachverfolgung unserer Browsing-Aktivitäten und -Interessen geht, denken viele erstmal an #Cookies. Doch Cookies sind nur ein kleiner Teil dessen, wie Big-Tech-, Werbe- und andere #Tracking-Firmen an unsere Online- (und damit auch Offline-)Aktivitäten kommen wollen.
Shivan Kaul Sahib, hat zusammengefasst, wie wir heute online verfolgt werden. Und was Browser schon tun, um uns davor zu schützen.
Überraschung: #Chrome tut am wenigsten. (NOT!)
https://pitg.network/news/2025/08/15/browser-fingerprinting.html
Oh wow, Google is really sneaky with their AI Mode button on the new tab page in Chrome. Here's a very unintuitive way to disable it.
1. Open chrome://flags/ in your browser.
2. Look for "ntp-compose-entrypoint".
3. Switch to "disabled".
4. Restart your browser.
If you're running Windows 11, necessary for work, what is your current preferred web browser?
I have been running Edge but it seems to have greatly increased its need for resources recently. I guess that could also be an extension.
Just curious what everyone likes.
I need to get #adb and #fastboot running on #bazzite or #bluefin because I need to swap the ROM on a phone for my momma.
I think I might need rpm-ostree for that because of the sorts of permissions it might need. can't use the #grapheneos browser based installer because they said #flatpak #chrome isn't a great idea.
Kisa Chromen tulevasta omistajasta kiihtyy - eurooppalaiselta hakukoneelta yllättävä tarjous
Voittoa tavoittelematon hakukone Ecosia kertoo ostavansa Chromen ilmaiseksi ja säätiöivänsä sen. Ecosia käyttäisi kaiken Chromesta tulevan rahavirran luonnonsuojeluun, kuten se käyttää omatkin voittonsa.
https://dawn.fi/uutiset/2025/08/24/chrome-ostotarjous-ecosia
Using Bitwarden (also other password managers!) makes you #vulnerable to 1 click credit card hijacking.
@bitwarden sees issue as low prio and did not bother to fix it in 4 months :(
This according to #cybersecurity researcher Marek Tóth in his recent #defcon33 talk
https://marektoth.com/blog/dom-based-extension-clickjacking/#fixed-versions
I am wondering if this is really #Chrome only or also impacts the #Firefox #bitwarden extension.
Popular #VPN extension for Google #Chrome is a security nightmare, screenshots every page users visit and sends them to anonymous developer — FreeVPN.One flagged over enormous privacy concerns | Tom's Hardware https://www.tomshardware.com/tech-industry/cyber-security/a-popular-vpn-extension-for-google-chrome-has-been-screenshotting-every-page-users-visit-freevpn-one-flagged-over-enormous-privacy-concerns
Risky Business says Google had not removed it from their Chrome extensions offerings as of publication and that Google had even formerly recommended this extension. #surveillance
SpyVPN: The Google-Featured VPN That Secretly Captures Your Screen https://www.koi.security/blog/spyvpn-the-vpn-that-secretly-captures-your-screen
Ecosia vuole gestire Chrome: una proposta noprofit contro le offerte miliardarie
https://gomoot.com/ecosia-vuole-gestire-chrome-una-proposta-nonprofit-contro-le-offerte-miliardarie/
#Ecosia has offered to take ‘stewardship’ of #Chrome. And it’s not a bad idea. - https://techcrunch.com/2025/08/21/ecosia-has-offered-to-take-stewardship-of-chrome-and-its-not-a-bad-idea/ do it
