Vue lecture

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.

ChatGPT Work can now log in to websites without seeing your passwords

ChatGPT Work can now log in to websites without seeing your passwords
ChatGPT Work can now cross website login screens on the web and mobile, allowing its cloud browser to complete tasks inside authenticated accounts. Users enter credentials and two-factor codes directly into a secure form, while ChatGPT remains unable to see or store them—a change that expands the security boundary from public web browsing to active account sessions.

Source

Microsoft Edge 151 baseline adds six security controls

Microsoft Edge 151 baseline adds six security controls
Microsoft has released the Microsoft Edge 151 security baseline with six new recommendations and one additional setting for evaluation—a significant change from the Edge 150 baseline, which required no policy changes. Administrators should also ensure desktop Edge is running 151.0.4129.101 or newer, since the update includes current Chromium security fixes and the Edge-specific CVE-2026-72970 patch.

Source

Chrome tests Gemini activity logs for downloads and password fills

Chrome tests Gemini activity logs for downloads and password fills
Chrome is testing “Critical Actions in History,” a new Chrome Canary feature that records what Gemini does during browser tasks. The audit view follows Google’s experiments with letting Gemini use saved passwords to complete web tasks, adding visibility into actions such as password fills, file downloads, and visited pages.

Source

Microsoft sets September 2026 deadline to replace Edge MDAG and WIP

Microsoft sets September 2026 deadline to replace Edge MDAG and WIP
Microsoft will complete the retirement of Microsoft Defender Application Guard (MDAG) and Windows Information Protection (WIP) support in Microsoft Edge by the end of September 2026. The deadline primarily affects organizations that still depend on these protections in Edge on Windows 10, giving administrators time to find supported replacements.

Source

Chrome may let Gemini use saved passwords to complete web tasks

Chrome may let Gemini use saved passwords to complete web tasks
Google is testing a Chrome feature that would let its Gemini “Spark” agent use selected saved passwords to sign in to websites and complete multi-step tasks. The capability remains experimental and requires users to approve each action, but it would give an AI agent access to credentials that were previously confined to Chrome’s password manager.

Source

New CDP attack hijacks live Chrome and Edge sessions after Windows compromise

New CDP attack hijacks live Chrome and Edge sessions after Windows compromise
A newly disclosed Windows post-exploitation technique can activate the Chrome DevTools Protocol (CDP) inside an already running Google Chrome or Microsoft Edge process, giving attackers access to authenticated sessions without stealing or replaying cookies. The method requires prior code execution, but can expose browser data, WebAuthn activity, extensions, and live account access while bypassing protections aimed at off-device cookie theft.

Source

Edge 150 adds eight settings

Edge 150 adds eight settings
Microsoft’s security review of Microsoft Edge 150 finds that none of its eight new computer and user settings require enforcement. Despite Edge 150 receiving multiple stable-channel updates in July, Microsoft continues to recommend the Edge 139 security baseline for enterprise deployments.

Source

Claude Cowork now carries browser tasks across Chrome and desktop

Claude Cowork now carries browser tasks across Chrome and desktop
Claude Cowork is now the engine behind the Claude in Chrome side panel, allowing users to start browser tasks in Chrome and continue them later in Claude’s desktop, web, or mobile apps. The integration is available on Max and Team plans, with Pro access rolling out, while Enterprise administrators can enable it selectively and restrict approved domains.

Source

❌