tldrdaily.news logo
Tag

Chrome

All articles tagged with #chrome

Google tests quantum-resistant TLS via Merkle Tree Certificates
technology6 hours ago

Google tests quantum-resistant TLS via Merkle Tree Certificates

Google outlined a plan to keep HTTPS secure in a post-quantum era by using Merkle Tree Certificates (MTCs) that compress quantum-resistant data into compact proofs. A certificate authority would sign a single Tree Head for potentially millions of certs, with browsers receiving a lightweight inclusion proof instead of bulky post-quantum material (roughly 2.5 KB today vs. 64 bytes). Public transparency logs help prevent rogue certs, and Chrome has already started implementing MTCs, with Cloudflare piloting about 1,000 TLS certs while CAs prepare to adopt the system. An IETF working group on PKI, Logs, and Tree Signatures is coordinating standards to standardize this long-term, aiming to accelerate post-quantum resilience without slowing handshake times.

via Ars Technica|
#chrome#merkle-trees#post-quantum-cryptography
Chrome gets emergency fix for the first 2026 zero-day exploited in the wild
technology11 days ago

Chrome gets emergency fix for the first 2026 zero-day exploited in the wild

Google released emergency Chrome updates to fix CVE-2026-2441—a use-after-free in CSSFontFeatureValuesMap exploited in the wild—marking Chrome’s first zero-day patch of 2026; the fix has been backported across commits and is rolling out to Windows, macOS (145.0.7632.75/76), and Linux (144.0.7559.75), with a note that related issues remain addressed in bug 48393607. Users should update Chrome or enable auto-update.

via BleepingComputer|
#chrome#cve-2026-2441#cybersecurity
Chrome patch blocks actively exploited CSS zero-day with CVE-2026-2441
security11 days ago

Chrome patch blocks actively exploited CSS zero-day with CVE-2026-2441

Google released security updates for Chrome to fix a high-severity use-after-free in CSS (CVE-2026-2441) that was being exploited in the wild. Updates are available for Windows/macOS (145.0.7632.75/76) and Linux (144.0.7559.75); users should relaunch Chrome after updating. The vulnerability’s exploit exists in the wild, and the article notes Apple also patched related zero-days. Users of other Chromium-based browsers should apply fixes when available.

via The Hacker News|
#chrome#cve-2026-2441#patch
Google's Auto Browse in Chrome Shows AI Still Needs Human Hands
technology28 days ago

Google's Auto Browse in Chrome Shows AI Still Needs Human Hands

A hands-on look at Google's Auto Browse for Chrome finds the AI agent can navigate and perform multi-step tasks, but it often doesn’t click when it should, misreads prompts (like seat selection), and requires user takeover for critical actions. While promising for automation, the tool is currently unreliable and raises security and trust concerns about relying on AI for purchases and browsing.

via WIRED|
#ai#auto-browse#browser-automation
Chrome Expands AI Toolbox with Gemini Sidebar and Auto Browse
technology29 days ago

Chrome Expands AI Toolbox with Gemini Sidebar and Auto Browse

Google Chrome is adding a persistent Gemini side panel and an autonomous “Auto Browse” feature that can perform multi-step web tasks (such as researching prices, filling forms, scheduling, managing subscriptions, and shopping) while staying within a user-defined budget. It also brings in-browser AI image generation with Nano Banana, and Google says a future “Personal Intelligence” feature will offer more personalized help. The Gemini sidebar and Nano Banana are rolling out via a server-side update, with Auto Browse currently limited to AI Pro/Ultra subscribers in the U.S. and requiring user permission for tasks involving login credentials or sensitive actions.

via MacRumors|
#ai#auto-browse#browser
Chrome Gets an AI Co-Pilot that Navigates the Web for You
technology1 month ago

Chrome Gets an AI Co-Pilot that Navigates the Web for You

Google unveils Auto Browse for Chrome, a Gemini 3–powered AI agent that can autonomously navigate and perform web tasks inside a Chrome session. Initially limited to US users on Google’s AI Pro/Ultra plans, with user oversight required for sensitive actions like posting or paying. The feature signals a broader shift to AI-driven browsing, though safety concerns (e.g., prompt-injection) and gradual rollout are noted as it tests in early stages.

via WIRED|
#ai#automation#browsing
technology1 month ago

GhostPoster malware infiltrates 840,000 users via trusted-looking extensions

Security researchers warn that 22 malicious browser extensions, hiding GhostPoster malware in their logos, have infected over 840,000 users across Chrome, Firefox and Edge since 2020. The extensions spy on activity, inject backdoor scripts, and redirect to fraudulent sites, with potential to install more malware. Mozilla and Microsoft removed the extensions, but affected users must uninstall them manually to stop further damage.

via PCWorld|
#browser-extensions#chrome#firefox
Chrome lets you delete the on-device AI powering scam protection
technology1 month ago

Chrome lets you delete the on-device AI powering scam protection

Google Chrome now allows users to delete the local AI model that powers the Enhanced Protection feature’s real-time scam-detection and suspicious-download scanning. You can disable this by going to Settings > System and turning off “On-device GenAI.” The on-device model is currently in Chrome Canary with rollouts expected soon, and Google suggests these local AI components may power other Chrome features beyond scam protection.

via BleepingComputer|
#ai-security#chrome#enhanced-protection