Vue lecture

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.

Edge 152 starts Microsoft’s two-week update race

Edge 152 starts Microsoft’s two-week update race
Microsoft Edge 152 begins a faster major-release schedule that will deliver browser updates every two weeks instead of every four. The change also affects WebView2, while organizations that need more time to test releases can remain on Edge’s eight-week Extended Stable channel.

Source

Next.js fixes two critical RCE flaws, including a Windows-only attack

Next.js fixes two critical RCE flaws, including a Windows-only attack
Vercel has patched two critical unauthenticated remote-code-execution vulnerabilities in Next.js, including a Windows-only path-traversal flaw rated CVSS 9.0 and an AVIF image-processing bug rated CVSS 9.5. Administrators should upgrade immediately: no workaround is available for affected Windows deployments, while AVIF-enabled sites may be exposed to malicious image files.

Source

ChatGPT Work can now log in to websites without seeing your passwords

ChatGPT Work can now log in to websites without seeing your passwords
ChatGPT Work can now cross website login screens on the web and mobile, allowing its cloud browser to complete tasks inside authenticated accounts. Users enter credentials and two-factor codes directly into a secure form, while ChatGPT remains unable to see or store them—a change that expands the security boundary from public web browsing to active account sessions.

Source

Microsoft Edge 151 baseline adds six security controls

Microsoft Edge 151 baseline adds six security controls
Microsoft has released the Microsoft Edge 151 security baseline with six new recommendations and one additional setting for evaluation—a significant change from the Edge 150 baseline, which required no policy changes. Administrators should also ensure desktop Edge is running 151.0.4129.101 or newer, since the update includes current Chromium security fixes and the Edge-specific CVE-2026-72970 patch.

Source

Chrome tests Gemini activity logs for downloads and password fills

Chrome tests Gemini activity logs for downloads and password fills
Chrome is testing “Critical Actions in History,” a new Chrome Canary feature that records what Gemini does during browser tasks. The audit view follows Google’s experiments with letting Gemini use saved passwords to complete web tasks, adding visibility into actions such as password fills, file downloads, and visited pages.

Source

Microsoft sets September 2026 deadline to replace Edge MDAG and WIP

Microsoft sets September 2026 deadline to replace Edge MDAG and WIP
Microsoft will complete the retirement of Microsoft Defender Application Guard (MDAG) and Windows Information Protection (WIP) support in Microsoft Edge by the end of September 2026. The deadline primarily affects organizations that still depend on these protections in Edge on Windows 10, giving administrators time to find supported replacements.

Source

❌