Web browsers process untrusted web content, making flaws, malicious extensions, and stolen session data important cybersecurity concerns.
Search across headline titles and summaries.
Background for this topic.
A web browser is software that retrieves and displays websites and web applications, while executing code such as JavaScript and storing data including cookies, credentials, and browsing history. Its security boundary includes the browser interface, rendering engine, networking components, extensions, and connections to operating-system resources.
Browsers are exposed to malicious or compromised websites, phishing pages, drive-by exploitation of browser vulnerabilities, and abusive extensions. A successful exploit may escape browser isolation or access site data, while stolen cookies can enable account use without the password. Important defenses include prompt browser and extension updates, sandboxing and site isolation, phishing protection, carefully controlled permissions, and HTTPS (which protects data in transit but does not make a site trustworthy). Organizations may also manage versions, extensions, and configuration centrally, and use browser telemetry during vulnerability management or investigations.
Google on Wednesday said it's once again delaying its plans to turn off third-party cookies in the Chrome web browser from late 2023 to the second half of 2024
Microsoft says Microsoft Edge users will notice improved performance and a smaller disk footprint because the web browser now automatically compresses disk caches. [...]
The Racoon Stealer malware as a service platform gained notoriety several years ago for its ability to extract data that is stored within a Web browser. This data initially included passwords and cookies, which sometimes allow a recognized device to be authenticated without a password being entered. Racoon Stealer was also designed to steal auto-fill data, which can include a vast trove of