Google Chrome

Reported Context (41)

Volexity’s discovery of multiple Chinese threat actors simultaneously using zero-day exploits in Google Chrome and Microsoft Windows in campaigns that, if successful, would download and run malware on an exploited Volexity Demonstrates AI-Assisted Incident Triage and Forensics with Volcano MCP
Google Chrome Recorded Future Reports 94 High-Impact Vulnerabilities in September 2026, Including 80 Actively Exploited
The findings coincide with the discovery of several malicious or sketchy extensions for Firefox, Google Chrome, and Microsoft Edge in recent months - 16 Malicious Firefox Extensions Impersonated Rabby and OKX Wallets to Steal Recovery Phrases
The initial VBS launches Google Chrome in a maximized window and supplies a single URL as an argument: TASK#STOMP PowerShell Backdoor Steals Documents and Enables Remote Access
The findings affected Google Chrome’s Gemini Live, Perplexity Comet, Microsoft Edge, Opera Neon, and Claude in Chrome, and led to two CVEs and bug bounty rewards from multiple vendors. BragJack Uses Malicious Extensions to Hijack Browser AI Agents

CVE (97)

Malware (89)

People (65)

Threat Actors (57)

MITRE ATT&CK (158)

Vendors (54)

Products (269)

Tools (98)

Industries (41)

Countries (44)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.