browser security

Google

2026-09-05 15:03:26

Google Patches High-Severity Chrome Flaw Already Exploited in the Wild

Google has released a fix for CVE-2026-85046, a high-severity Chrome vulnerability that the company said was already being exploited in the wild before the patch landed. The flaw affects V8, the engine Chrome uses to run JavaScript and WebAssembly, but Google has not identified the attackers, named any victims, or explained what the exploit is capable of doing. The patch is included in Chrome 152.0.7977.82 and 152.0.7977.83 for Windows and Mac, and in version 152.0.7977.82 for Linux, with rollout scheduled over the coming days and weeks. Google also said it is temporarily withholding some details while users and affected third-party projects install updates. Security researcher Salvatore Gulizia, known as Serotav, reported the bug on Aug. 4 and received a $1,000 reward. While Google has not linked this issue to attacks on crypto users, recent cases have shown that browser wallets, exchange accounts, and wallet-related extensions remain active targets for theft and credential harvesting.

500

malicious ext

2026-08-28 20:46:26

Researchers Uncover 19 Malicious Chrome and Edge Extensions That Steal Crypto Wallet Keys

Cybersecurity researchers have identified 19 malicious browser extensions for Google Chrome and Microsoft Edge that can steal sensitive information from crypto wallets, including recovery phrases and private keys. Disguised as legitimate tools, these extensions quietly harvest wallet credentials without the user's knowledge, posing a direct threat to digital asset security. The researchers recommend installing extensions only from official stores and regularly checking the permissions and ratings of installed extensions. The report was originally published by U.Today and relayed by Techub News.

500

Firefox exten

2026-08-27 13:40:10

At Least 40 Malicious Firefox Extensions Found Stealing Crypto Wallet Seed Phrases and Private Keys

Security researchers at Socket said attackers have published at least 40 high-risk malicious extensions in Mozilla Firefox’s official add-on store, disguising them as major Web3 wallets including OKX, Rabby Wallet, and TronLink. The campaign, which Socket said has been active since March 2026, was described as an industrialized extension-based theft operation built to harvest seed phrases and private keys and then drain user funds. According to Socket’s Aug. 20, 2026 report, the operation extends beyond those 40 wallet-themed extensions. It also links to 37 decoy add-ons posing as sports score tools and other harmless utilities, bringing the total to 77 related repositories and release branches. Some extensions reportedly began as benign-looking tools and were later converted into wallet-stealing programs while keeping the same Firefox extension ID. Socket said the attackers relied on a shared codebase for mass distribution, used a Supabase cloud project as a remote command-and-control switch to activate malicious behavior after review, and kept reserve shell extensions ready to replace any add-ons taken down. The report also warned that browser extensions can access tabs, web requests, storage, and page content, making them especially dangerous for crypto users who enter seed phrases, private keys, and passwords in the browser.

700