Security

Highlight of the Orion browser is its commitment to privacy: it includes no telemetry and no AI-bloatware.

SquareX’s analysis of Perplexity’s Comet browser reveals that it includes two hidden extensions with access to an undocumented MCP API capable of executing system-level commands.

Vivaldi browser has partnered with Proton VPN to offer an integrated VPN directly within the browser, providing users seamless access to secure browsing without additional extensions or software installations.

Security researchers at SquareX have revealed a significant security flaw that allows malicious browser extensions, dubbed “Polymorphic Extensions,” to disguise as trusted extensions. By replicating legitimate interfaces and icons, attackers trick users into granting access to sensitive data.

Google has almost completed its phased rollout of disabling Manifest V2 extensions in Chrome stable version, marking a significant transition in the browser’s extension ecosystem.

Google is testing an AI-powered “Automated Password Change” feature in Chrome browser, aiming to enhance user security by streamlining the process of updating compromised passwords.

SquareX’s research team has identified a critical security flaw in browser extensions, called “Browser Syncjacking.” This vulnerability enables attackers to take full control of a user’s browser and device through a series of hijacking stages.