Browser Security
The latest Browser Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Google Drops Gemini AI Into Chrome—Here’s What Windows Users Need to Know
Google today began rolling out what it calls the “biggest upgrade in Chrome’s history,” embedding its Gemini AI assistant directly into the browser toolbar and address bar for desktop users in...
Windows 11’s Speed Test Shortcut Opens Bing: What It Means and How to Use It
A new “Perform speed test” option has appeared in recent Windows 11 Insider builds, tucked into the taskbar network flyout and right-click menu. Tap it, and instead of a native diagnostic, your...
Edge for Android UI Spoofing Bug Can Trick You into Handing Over Passwords — Update Now
Microsoft has confirmed a UI spoofing vulnerability in Edge for Android that could let attackers trick you into giving up credentials or downloading malware, simply by visiting a malicious webpage....
Windows 11 Adds a Speed Test Button to Network Flyout, But It’s a Bing Web Shortcut
Microsoft is quietly testing a one-click internet speed test shortcut in Windows 11, placed directly inside the network flyout and taskbar context menu. The feature, unearthed by sharp-eyed Insiders...
Firefox’s Enterprise-Only AI Kill Switch Betrays Consumer Trust, Sparks Privacy Backlash
Mozilla has quietly armed IT administrators with a supported, one-click method to disable every generative AI feature in Firefox—but regular users who crave the same simplicity are being told to...
Microsoft Edge Fixes Mojo IPC Flaw That Bypasses Site Isolation: Update Now (CVE-2025-10201)
Microsoft has shipped a critical patch for the Chromium-based Edge browser that closes a high-severity vulnerability allowing remote attackers to bypass the browser’s site isolation protections....
CVE-2025-10200: Chrome 140 Patches ServiceWorker Use-After-Free, Edge Users Must Update Immediately
Google has shipped a critical patch for a use-after-free vulnerability in the ServiceWorker component of Chromium, tracked as CVE-2025-10200, with the release of Chrome version 140.0.7339.80/81 and...
Chrome Canary Auto-Revokes Clipboard Access from Dormant Sites
Google has escalated clipboard privacy to a top-tier browser permission, with Chrome Canary builds now automatically revoking clipboard access from websites you haven’t recently visited. The Safety...
Google Rushes Chrome 140 Fix for CVE-2025-9864 V8 Memory Bug, Microsoft Edge Also Patched
Google has released a critical security update for its Chrome browser, patching a high-severity use-after-free vulnerability in the V8 JavaScript engine that could let attackers hijack systems...
CVE-2025-9866: Chrome and Edge Fix CSP Bypass That Could Let Attackers Steal Data via Extensions
A high-severity security flaw in Chromium’s Extensions subsystem allows attackers to bypass Content Security Policy (CSP) protections using a maliciously crafted HTML page, potentially exposing...
Chrome 140 for Android Fixes UI Spoofing Bug That Could Trick Users into Malicious Downloads
Google’s September 2025 stable channel update for Chrome, version 140, patches a UI spoofing vulnerability in the Downloads component that could allow attackers to mislead Android users into...
Android's Chrome Toolbar Trickery Fixed: CVE-2025-9865 Patched in Chrome 140, Edge Secured
Google has released a patch for a UI spoofing vulnerability in Chrome that could allow attackers on Android to trick users into believing they are visiting a trusted website. The fix, tracked as...