Google is testing Chrome tab scrolling in Canary, letting users navigate crowded tabs via mouse wheels, gestures, and dedicated scroll arrows.

Related Posts:

• Microsoft Winds Down Oracle AI Cloud Lease
• OpenAI Funding Valuation Reaches $1.25 Trillion
• Microsoft Overhauls Academic Licensing and Storage Quotas

The post Chrome Tab Scrolling Returns to Canary Builds appeared first on Daily CyberSecurity.

Chrome security update: Chrome 157 fixes 213 flaws, including critical bugs CVE-2026-121156 in Dawn and CVE-2026-121035 in Prerender. Update now.

Related Posts:

• Rails 8.0.5.2 and 8.1.4.1 Fix 21 Security Flaws, Including Critical Active Storage File Write Bug
• SnappyMail Remote Code Execution Chain Disclosed With Public PoC Exploit Code
• Airbyte Vulnerability Exploited in the Wild Lets Attackers Run Code in Connector Builder

The post Chrome 157 Security Update Fixes 213 Flaws, Including Seven Critical Bugs appeared first on Daily CyberSecurity.

Chrome 156 security update 156.0.8078.79 fixes 21 flaws, including critical Chrome vulnerability CVE-2026-76024 in MediaStream. Update now.

Related Posts:

• Linux Kernel CVE-2026-98432 Flaw Enables Remote Root
• Progress Patches 10.0 CVSS WS_FTP Server Flaw CVE-2026-84295 and 14 Other Bugs
• WordPress Core Vulnerability Exploited in the Wild

The post Chrome 156 Security Update Fixes 21 Flaws, Including a Critical MediaStream Bug appeared first on Daily CyberSecurity.

An investigation into browser extensions identified 319 suspicious extensions linked to about 13.4 million reported users, exposing a search-hijacking ecosystem operating since 2016. Marketed as manual finders, PDF converters, safe search utilities, and AI search tools, the extensions funnel queries through operator-controlled infrastructure before delivering Yahoo or Bing results. The Searchjacked investigation expands earlier research […]

The post 319 Suspicious Chrome Extensions Hijack Default Search Settings Without Sensitive Permissions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Chrome security update 156.0.8078.73 fixes 52 flaws, including critical Chrome vulnerabilities like sandbox escape CVE-2026-118306. Update now.

Related Posts:

• Intelbras Camera Vulnerability Lets Attackers Knock Mibo Cameras Offline
• Body-Parser Flaw CVE-2026-111181 Lets One Request Crash Express Servers, PoC Public
• Unauthenticated File Read Leaks Master Key in LiteLLM Enterprise Proxy, CVSS 10.0

The post Chrome Security Update Fixes 52 Flaws, Including Four Critical Bugs appeared first on Daily CyberSecurity.

Anthropic announced that an unreleased research model called Claude successfully developed working exploit chains for Chrome, Safari, Android, Windows, and Linux. The company’s Frontier Red Team shared these findings on October 27, 2026. Many exploit chains required minimal or no user interaction, and the team reported every identified flaw to the respective vendor before publication. […]

The post Anthropic’s Claude Chains One-Click and Zero-Click Exploits to Bypass Chrome, Android and Linux Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The AV2 video codec promises 30% better compression than AV1. YouTube plans web AV2 streaming in early 2027.

Related Posts:

• Apple Presto Return Scanner Targets In-Box Fraud
• Come Back to Firefox Campaign Champions Web Privacy
• OpenSSL 4.1.0 Release Introduces Elbrus Support and DTLS 1.3

The post AV2 Video Codec Moves Toward Chrome and YouTube appeared first on Daily CyberSecurity.

Google Chrome introduces suspicious-site warnings and AI-powered ClickFix detection, with both new defenses tied to Enhanced Protection mode.

The post Chrome Adds Suspicious Site Warnings and ClickFix Protection appeared first on TechRepublic.

Chrome ClickFix protection in Enhanced Protection flags risky clipboard commands and uses cloud Gemini AI to block scam sites.

Related Posts:

• cURL Vulnerability Reporting Policy Shifts to GitHub
• Apple Blocks WebKit Identity Resolution in Privacy Shift
• UK CMA Moves to Unlock iPhone Contactless Payments

The post Chrome ClickFix Protection Scans Risky Clipboard Commands appeared first on Daily CyberSecurity.

The Chrome 156 security update fixes 353 flaws, including six critical vulnerabilities such as CVE-2026-113341. Update to 156.0.8078.47.

Related Posts:

• Atlassian Patches 176 Flaws in Jira, Confluence and Other Data Center Products
• Oracle E-Business Suite Flaw CVE-2026-101809 Scores CVSS 10.0
• Apache CouchDB 3.5.3 Fixes Six Flaws as Retired Apache Cocoon Gets Four Unpatched Bugs

The post Chrome 156 Ships With 353 Security Fixes, Including Six Critical Vulnerabilities appeared first on Daily CyberSecurity.

OpenAI expands ChatGPT's Chrome integration with tab access and browser automation. Learn what the update means for productivity, privacy, and enterprise security.

The post ChatGPT Can Now Do More in Chrome, but There’s a Security Trade-Off appeared first on TechRepublic.

Google released Chrome version 156 to the stable channel for Windows, macOS, and Linux, addressing 353 security vulnerabilities, including six critical flaws. Announced on October 20, 2026, this update addresses memory corruption, use-after-free errors, input validation issues, and other weaknesses across various browser components. Google stated that the deployment will continue over the coming days […]

The post Google Chrome 156 Fixes 353 Security Vulnerabilities, Including 6 Critical Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google released a Chrome Stable security update fixing 10 vulnerabilities across Windows, Mac, and Linux, including a high-severity DOM memory corruption flaw reported by Xinyang Ge of Anthropic with Claude AI.

The update also addresses one critical, six high-severity, and three medium-severity vulnerabilities. Google announced the update on October 15, 2026.

Google is rolling out Chrome versions 155.0.8059.84/.85 for Windows and Mac, and version 155.0.8059.84 for Linux over the coming days and weeks. Users should install the update when it becomes available and check Chrome’s About page to prompt an update check.

The most serious issue is CVE-2026-110922, a critical use-after-free flaw in Chrome’s Prerender feature. Google credits Xinyang Ge with reporting it on October 2.

A use-after-free bug occurs when software tries to use memory after it has been released. Depending on how an attacker can reach the flaw, this type of error may cause a crash or allow memory corruption. Google has not published further technical details and has not said the issue is being exploited.

CVE-2026-110913 is a high-severity memory corruption flaw in Chrome’s DOM, the browser system that represents and manages the structure of web pages.

Google Fixes 10 Chrome Vulnerabilities

Ge reported the bug on September 29, with Claude’s assistance. Google’s release note does not explain how the issue was found, whether Claude identified the flaw or helped with analysis, or what steps were involved. It does, however, publicly credit the AI’s assistance in the report.

The other high-severity fixes affect V8, Chrome’s JavaScript engine, as well as Core and SVG. They include two additional use-after-free flaws in V8, CVE-2026-110919 and CVE-2026-110921, and memory corruption issues CVE-2026-110918, CVE-2026-110917, and CVE-2026-110920. The reports came from Ge, Google, and researcher C0rk1.

The three medium-severity bugs involve improper input validation in Desktop, a use-after-free issue in Compositing, and memory corruption in Workers.

Google credited its own researchers with reporting these flaws. Together, the list shows that this release addresses problems in separate browser components rather than a single feature or subsystem.

Google says detailed bug information may remain restricted until most users have installed the fixes. This can limit what researchers and users can learn about the vulnerabilities while the update is spreading.

The company also said it uses tools such as AddressSanitizer, MemorySanitizer, libFuzzer, and AFL to find security bugs during development.

Chrome updates are delivered gradually, so users may not receive the new version at the same time. Check the browser’s About Google Chrome page and restart it if prompted to complete installation. Organizations should follow their normal browser update process and confirm that managed devices receive the fixed release.

This update follows other recent Chrome security coverage, including Google’s earlier report on a large Chrome vulnerability update and coverage of multiple Chrome flaws. Google’s Stable Channel announcement and Chrome Security page provide the primary release information.

Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs.

The post Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found With Claude AI appeared first on Cyber Security News.

A Chrome security update fixes 10 flaws, including critical use after free bug CVE-2026-110922. Update to Chrome 155.0.8059.84 now.

Related Posts:

• Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
• PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host
• CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras

The post Chrome 155 Update Fixes 10 Security Flaws, Including Critical Prerender Bug appeared first on Daily CyberSecurity.

Google restructures its Chrome VRP rewards, raising baseline payouts for memory corruption bugs to $2,000 and offering up to $20,000 for critical exploits.

Related Posts:

• npm Trusted Publishing Now Expires After 48 Hours
• Google Play AI Apps Revolutionize Android Publishing
• Google Gemini 4 Argon Model Officially Launches

The post Google Updates Chrome VRP Rewards for Memory Flaws appeared first on Daily CyberSecurity.

The Chrome security update to version 155 fixes 37 flaws, including seven critical bugs and 25 use after free issues. Update Chrome now.

Related Posts:

• Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
• Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells
• Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost)

The post Chrome 155 Security Update Fixes 37 Flaws, Including Seven Critical Bugs appeared first on Daily CyberSecurity.

Google released a Chrome security update that addresses 37 vulnerabilities, including seven critical flaws that raise concerns about memory corruption and possible code execution.

Published on October 13, 2026, the update covers Windows, Mac, and Linux, with fixes spanning graphics, PDF handling, media processing, networking, and other browser components.

According to Google’s Stable Channel Update for Desktop, the patched versions are 155.0.8059.79/.80 for Windows and Mac, and 155.0.8059.79 for Linux. The release includes seven critical, 29 high, and one medium-severity security fixes.

Google says it will continue distributing updates over the coming days and weeks. The critical vulnerabilities include CVE-2026-110152, a buffer overflow in ANGLE, Chrome’s graphics translation layer. Zhenpeng “Leo” Lin at depthfirst reported the issue on September 30.

Buffer overflows can corrupt memory when software writes beyond the space reserved for data, potentially creating opportunities for attackers to change program behavior.

The remaining six critical entries are use-after-free flaws. CVE-2026-110149 affects Browser, CVE-2026-110136 affects PDF, CVE-2026-110161 affects Network, and CVE-2026-110165 affects Core.

Multiple Google Chrome Vulnerabilities

Google also patched CVE-2026-110148 in SVG and CVE-2026-110151 in Media. These findings involve Google researchers and Xinyang Ge.

A use-after-free vulnerability occurs when software continues accessing memory after releasing it. Depending on the bug, attackers may influence that memory’s contents, causing crashes, corrupting data, or potentially running malicious code. However, the flaw category alone does not enable an attack against every affected component.

Cybersecurity News previously covered Chrome’s update fixing 247 vulnerabilities, including four critical use-after-free issues. The latest release continues that focus on memory safety across multiple browser features rather than a single isolated component.

Among the high-severity vulnerabilities, CVE-2026-110169 affects V8, Chrome’s JavaScript and WebAssembly engine. Rapid7’s vulnerability record states that a crafted HTML page could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox in versions before 155.0.8059.79.

That limitation matters. Code execution inside the sandbox does not, by itself, prove an attacker can take control of the entire operating system.

Google’s release announcement does not describe a complete attack chain or confirm that these newly patched vulnerabilities are being exploited in the wild.

Google credits Xinyang Ge at Anthropic, assisted by Claude, with reporting CVE-2026-110169. Other high-severity fixes address V8 type confusion, buffer overflows in Animation and PDFium, a Passwords information leak, Installer privilege elevation, and authorization problems in ReadingMode, Updater, and Mojo.

For background, Cybersecurity News’ coverage of earlier ANGLE and V8 security fixes explains how memory-handling issues repeatedly affect graphics and script processing.

Users should open Chrome’s menu, select Help, then About Google Chrome to check for updates. After installation, select Relaunch to apply the fixes. Linux users should update through their package manager. Google’s Chrome update guide explains these steps.

Google may restrict detailed bug reports until most users receive patches. Restrictions may also remain if affected third-party libraries haven’t been fixed elsewhere, limiting the technical information currently available to readers and defenders.

Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs.

The post Multiple Google Chrome Flaws Could Enable Memory Corruption and Code Execution Attacks appeared first on Cyber Security News.

Google has awarded XBOW $250,000 for creating an AI-assisted exploit chain that enabled code execution outside the Chrome browser’s renderer sandbox on Windows. This reward marks the first full-chain payout for Chrome under Google’s vulnerability reward program, introduced in April 2026. According to XBOW, all three vulnerabilities involved have since been fixed. Google Pays $250,000 […]

The post Google Pays $250,000 for AI-Assisted Chrome Exploit Enabling Windows Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on October 13, 2026, this desktop update resolves weaknesses across various browser components, including graphics, networking, PDF processing, media, and JavaScript execution. The update includes seven critical vulnerabilities, 29 high-severity issues, and one medium-severity vulnerability, making […]

The post Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Chrome 158 drops XSLT on November 17, which can break RD Web Access on Windows Server. See the timeline and Microsoft's interim fixes.

Related Posts:

• Run Googlebook OS on MacBook via QEMU Virtualization
• Google AI Edge Foresight: A Free Offline Mac Tool
• Microsoft Blocks MSIX Attachments in Outlook

The post RD Web Access Breaks as Chrome Drops XSLT Support appeared first on Daily CyberSecurity.