Google and Microsoft's new WebMCP standard lets websites expose callable tools to AI agents through the browser — replacing costly scraping with structured function calls.
Over 260,000 users installed fake AI Chrome extensions that used iframe injection to steal browser and Gmail data, exposing ...
Microsoft details a new ClickFix variant abusing DNS nslookup commands to stage malware, enabling stealthy payload delivery and RAT deployment.
Google fixes actively exploited Chrome zero-day CVE-2026-2441, a high-severity CSS use-after-free flaw enabling sandboxed remote code execution.
A new variation of the fake recruiter campaign from North Korean threat actors is targeting JavaScript and Python developers ...
Google has released emergency updates to fix a high-severity Chrome vulnerability exploited in zero-day attacks, marking the ...
Chrome 146 is now in beta, bringing new features like WebNN and the Sanitizer API that could land in the stable release in a ...
More than 300 Chrome extensions were found to be leaking browser data, spying on users, or stealing user information.