Your web gateway can't see it. Your cloud access broker can't see it. Your endpoint protection can't see it. And yet 95% of organizations experienced browser-based ...

The recent attack campaign targeting browser extensions shows that malicious browser extensions are the next frontier for identity attacks. More than 2.6 million users across thousands of ...

SquareX discloses a new attack technique that shows how malicious extensions can be used to completely hijack the browser, and eventually, the whole device. PALO ALTO, Calif., Jan. 30, 2025 — Browser ...

Be careful around AI-powered browsers: Hackers could take advantage of generative AI that's been integrated into web surfing. Anthropic warned about the threat on Tuesday. It's been testing a Claude ...

For years, defensive security strategies have focused on three core areas: network, endpoint, and email. Meanwhile, the browser, where most modern work happens, sits across all of them. Cybercriminals ...

A new report out today from cybersecurity company Trellix Inc. warns that Facebook phishing scams are becoming significantly more sophisticated, as attackers increasingly abuse legitimate cloud ...

Apple has released security updates for iOS and its other operating systems that patches WebKit against a zero-day vulnerability that was actively in use against Google Chrome users. While companies ...

Another threat group using an Android exploit kit, and a backdoor that targets both Android and Windows users, could easily slip under your reading radar. After all, there are just so many ...

Researchers have uncovered a fresh browser attack that compromises "private" application programming interfaces (APIs) in Opera to allow carte blanche over victims' browsers. Browser APIs provide a ...

Security researchers have warned of a new attack which could enable malicious extensions to gain full control of a targeted browser and device, with minimal user interaction. SquareX said that, until ...