#browser-security on Hacker News

6 stories tagged browser-security, newest first.

Screenshot of blog.google: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

Google fixed more Chrome bugs in June than over the past two years, thanks to AI (blog.google)

536 points by Garbage 2 months ago | 548 comments

Google Security blog post from the Chrome Security Team on how Chrome uses AI to improve vulnerability discovery, triage, and patching.

chrome google vulnerability-discovery ai-security

Screenshot of twitter.com: Microsoft Edge stores all passwords in memory in clear text, even when unused

Microsoft Edge stores all passwords in memory in clear text, even when unused (twitter.com)

551 points by cft 5 months ago | 193 comments

A tweet claiming Microsoft Edge keeps all saved passwords in process memory in clear text, even when they are not being used.

microsoft-edge password-manager browser-security memory-forensics

Screenshot of chromereleases.googleblog.com: Zero-day CSS: CVE-2026-2441 exists in the wild

Zero-day CSS: CVE-2026-2441 exists in the wild (chromereleases.googleblog.com)

363 points by idoxer 8 months ago | 206 comments

Google Chrome Releases blog post announcing a Stable channel desktop update (145.0.7632.75/76) that fixes CVE-2026-2441, a CSS zero-day exploited in the wild.

cve-2026-2441 chrome zero-day css

Screenshot of github.com: A proposal to restrict sites from accessing a users’ local network

A proposal to restrict sites from accessing a users’ local network (github.com)

637 points by doener 1 year ago | 354 comments

GitHub repository for a Google explainer proposing that browsers restrict websites from accessing a user's local network without permission.

local-network-access browser-security web-platform chrome

Screenshot of kibty.town: Gaining access to anyones Arc browser without them even visiting a website

Gaining access to anyones Arc browser without them even visiting a website (kibty.town)

1332 points by xyzeva 2 years ago | 450 comments

A security researcher's blog post describing a Firebase misconfiguration in the Arc browser (CVE-2024-45489) that allowed remote code injection into any user's browser.

arc-browser firebase cve-2024-45489 vulnerability-research

Screenshot of github.com: Detect when your installed Chrome extensions have changed owners

Detect when your installed Chrome extensions have changed owners (github.com)

714 points by ben_s 2 years ago | 269 comments

GitHub repository for Under New Management, a Chrome extension that detects when installed Chrome extensions have changed owners.

chrome-extensions browser-security supply-chain-security javascript

#browser-security on Hacker News

Google fixed more Chrome bugs in June than over the past two years, thanks to AI(blog.google)

Microsoft Edge stores all passwords in memory in clear text, even when unused(twitter.com)

Zero-day CSS: CVE-2026-2441 exists in the wild(chromereleases.googleblog.com)

A proposal to restrict sites from accessing a users’ local network(github.com)

Gaining access to anyones Arc browser without them even visiting a website(kibty.town)

Detect when your installed Chrome extensions have changed owners(github.com)