» Tag
browser-security
3 postsNAT Slipstreaming v2.0 Bypasses NAT/Firewalls via the Browser
NAT Slipstreaming v2.0 abuses ALG connection tracking to let attackers remotely open any TCP/UDP port behind a victim's NAT via the browser.
Chrome Extension Secretly Exfiltrates AI Prompts to Vendor Servers
A Chrome extension silently captures and exfiltrates AI prompts and responses from 9 platforms, contradicting its own privacy store declaration.
Intercept.js brings context-aware YARA scanning to JavaScript runtimes
Intercept.js runs context-aware YARA rules in any JS runtime, adding browser download context to catch 0-day threats before files hit disk.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.com