Google Raises Rewards for Chrome Memory-Safety Bugs
Google has revised the Chrome VRP rewards program. The base reward for memory corruption bugs has increased from $500 to $2,000, with higher rates also applying to other types of findings.
Tag Chrome
Chrome Blocked Certificates After .gh, .sl and .as Registry Hijackings
According to Google, attackers compromised the registries of three country-code domains and changed their authoritative DNS records. Unauthorized HTTPS certificates were subsequently issued for some Google domains as well.
BragJack Shows the Risk of Malicious Browser AI Assistant Extensions
A researcher from Forever Security published proof-of-concept BragJack attacks. According to him, a malicious extension could abuse the integration of AI assistants in Chromium browsers.
Chrome 152 and Firefox 155 Fix Dozens of Security Flaws
Google and Mozilla released Chrome 152 and Firefox 155 updates. They fix critical and high-severity flaws, including memory safety, sandbox, and permission issues.
Socket Identified 19 Malicious Chrome and Edge Extensions
Socket’s analysis describes 19 malicious extensions with modular malware that could steal login credentials, sessions and crypto wallet data.