Security news aggregator

Latest coverage for Web Browser

Web browsers process untrusted web content, making flaws, malicious extensions, and stolen session data important cybersecurity concerns.

1 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

A web browser is software that retrieves and displays websites and web applications, while executing code such as JavaScript and storing data including cookies, credentials, and browsing history. Its security boundary includes the browser interface, rendering engine, networking components, extensions, and connections to operating-system resources.

Browsers are exposed to malicious or compromised websites, phishing pages, drive-by exploitation of browser vulnerabilities, and abusive extensions. A successful exploit may escape browser isolation or access site data, while stolen cookies can enable account use without the password. Important defenses include prompt browser and extension updates, sandboxing and site isolation, phishing protection, carefully controlled permissions, and HTTPS (which protects data in transit but does not make a site trustworthy). Organizations may also manage versions, extensions, and configuration centrally, and use browser telemetry during vulnerability management or investigations.

Showing 1 most recent headlines Filtered view
Krebs on Security 2 years, 9 months ago

The Fake Browser Update Scam Gets a Makeover

One of the oldest malware tricks in the book -- hacked websites claiming visitors need to update their Web browser before they can view any content -- has roared back to life in the past few months. New research shows the attackers behind one such scheme have developed an ingenious way of keeping their malware from being taken down by security experts or law enforcement: By hosting the malicious files on a decentralized, anonymous cryptocurrency blockchain.