Google has released Chrome 152.0.7977.82/.83 to fix CVE-2026-85046, a high-severity V8 zero-day that attackers are already exploiting. The update also addresses 11 other vulnerabilities and is rolling out gradually, so administrators should verify that managed endpoints receive the fix rather than waiting for automatic deployment.

Source

Microsoft is moving the Teams web client from `teams.microsoft.com` to `teams.cloud.microsoft`, with the redirect rollout expected to finish by the end of September 2026. Existing bookmarks and Teams links should continue working, but administrators need to check enterprise access controls and integrations before the old address is retired.

Source

Microsoft Edge is beginning to block JavaScript `unload` handlers by default, putting legacy websites, WebView2 applications, and managed browser environments on a migration deadline of September 5, 2026. The staged rollout starts by affecting about 60% of page loads in Edge 152 and 153, rises to 80% in Edge 154, and reaches all page loads in Edge 155.

Source

Alex Kantrowitz interviews Cloudflare CEO Matthew Prince about the web’s rapid shift toward AI-driven traffic, the future of online publishing, and the risks for small businesses. Prince says automated requests have already surpassed human browsing and could reach 1,000 times human traffic within five years, forcing major changes to infrastructure and internet economics.

Source

Firefox 155 and Thunderbird 155 are the first products to arrive under Mozilla’s new two-week release cadence, landing only days after the previous builds. The change follows Thunderbird’s move to fortnightly releases after version 153 became the ESR baseline, giving administrators a choice between rapid features and slower, security-focused maintenance.

Source

Microsoft Defender for Office 365 is incorrectly classifying legitimate Google search URLs as malicious, blocking users with “Opening this website might not be safe” warnings. Microsoft is investigating the Safe Links incident, tracked as MO1465962, while administrators may also see related detections in the Defender portal and Microsoft Sentinel.

Source

Microsoft released a security baseline for Microsoft Edge version 151 on August 25, 2026. The package adds six enforced isolation and data-protection policies plus one optional HTTPS setting for evaluation. For a summary of what each control does and why Microsoft recommends it, see Microsoft Edge 151 baseline adds six security controls. This article focuses on how to deploy and verify those settings in Active Directory and Intune.

Source

Microsoft has clarified Microsoft Edge Linux support by publishing exact distribution requirements for the 64-bit systems it officially tests. The supported baseline includes Ubuntu 18.04 or later, Debian 10 or later, Fedora 33 or later, and openSUSE Leap 15.5 or later.

Source

Google has completed its permanent Manifest V2 purge from the Chrome Web Store. Existing MV2 extensions may continue running on older Chrome installations, but they can no longer receive updates, be reinstalled after removal, or be recovered from Google if an administrator or user deletes them.

Source

Cloudflare has launched Adaptive Intelligence, a Bot Management engine that continuously retrains on live traffic and changes its detection logic as attackers adapt. The system is designed not merely to block bots, but to make repeated automation attempts slower, less predictable, and increasingly expensive to operate.

Source

Microsoft Edge 152 begins a faster major-release schedule that will deliver browser updates every two weeks instead of every four. The change also affects WebView2, while organizations that need more time to test releases can remain on Edge’s eight-week Extended Stable channel.

Source

Microsoft Edge 152 can now automatically unsubscribe users from push notifications sent by websites that Microsoft Defender SmartScreen blocks as scams, phishing pages, or malware. The Stable release also completes Edge’s shift to a two-week major-release cycle and adds Apple account sign-in on Windows and macOS.

Source

Cloudflare is turning BotBase from a one-way bot directory into an operator dashboard where developers can track submissions, fix rejected entries, and update bot identities. The new workflow also introduces automated checks to speed approval as AI crawlers and agents continue to multiply.

Source

Vercel has patched two critical unauthenticated remote-code-execution vulnerabilities in Next.js, including a Windows-only path-traversal flaw rated CVSS 9.0 and an AVIF image-processing bug rated CVSS 9.5. Administrators should upgrade immediately: no workaround is available for affected Windows deployments, while AVIF-enabled sites may be exposed to malicious image files.

Source

Claude Cowork can now open a separate browser inside the Claude Desktop app, allowing it to navigate websites, read pages, click links, fill forms, and collect data without an extension. The built-in browser is rolling out to Pro, Max, and Team users, while Enterprise administrators can manage it for their organizations.

Source

ChatGPT Work can now cross website login screens on the web and mobile, allowing its cloud browser to complete tasks inside authenticated accounts. Users enter credentials and two-factor codes directly into a secure form, while ChatGPT remains unable to see or store them—a change that expands the security boundary from public web browsing to active account sessions.

Source

Microsoft has released the Microsoft Edge 151 security baseline with six new recommendations and one additional setting for evaluation—a significant change from the Edge 150 baseline, which required no policy changes. Administrators should also ensure desktop Edge is running 151.0.4129.101 or newer, since the update includes current Chromium security fixes and the Edge-specific CVE-2026-72970 patch.

Source

ChatGPT Search sharply reduced its Reddit citations in August 2026, with Reddit’s share falling from 3.83% to 0.52% in Promptwatch’s tracking. The timing coincides with ChatGPT greatly increasing domain-specific `site:` searches and nearly doubling the number of web queries it performs for each answer.

Source

Chrome is testing “Critical Actions in History,” a new Chrome Canary feature that records what Gemini does during browser tasks. The audit view follows Google’s experiments with letting Gemini use saved passwords to complete web tasks, adding visibility into actions such as password fills, file downloads, and visited pages.

Source