Brave Android 1.43.88 Security Fixes

Implemented feature policy for Ethereum and Solana for iframes. Upgraded Chromium to 105.0.5195.68 — refer to Google Chrome advisories for inherited CVEs...

New Google Chrome Zero-Day Vulnerability Being Exploited in the Wild

Google on Tuesday rolled out patches for Chrome browser for desktops to contain an actively exploited high-severity zero-day flaw in the wild. Tracked as CVE-2022-2856, the issue has been described as a case of insufficient validation of untrusted input in Intents. Security researchers Ashley She...

Brave Software: Persistent user tracking is possible using window.caches, by avoiding Brave Shields

A vulnerability was discovered in Brave for iOS version 1.41.1 that allowed for persistent user tracking using window.caches, even when Brave Shields were enabled to block cookies. This could potentially allow for user tracking without their consent or knowledge...

Brave Software: Security token and handler name leak from window.braveBlockRequests

Vulnerability description not provided...

Facebook gets round tracking privacy measure by encrypting links

A form of individual tracking specific to your web browser is at the heart of a currently contested privacy battle, and one which Facebook has just got the upper hand to. This type of tracking involves adding additional parameters to the URLs that you click on a daily basis. When you click one of...

A week in security (June 27 – July 3)

Last week on Malwarebytes Labs: Ransomware review: June 2022 AstraLocker 2.0 ransomware isn’t going to give you your files back YTStealer targets YouTube content creators ZuoRAT is a sophisticated malware that mainly targets SOHO routers Amazon Photos vulnerability could have given attackers acce...

Brave Search wants to replace Google’s biased search results with yours

Brave Search, Brave Softwares privacy search engine, just turned one. To celebrate, the company says it is moving the search engine out of its beta phase to become the default search engine for all Brave browser users. Goodbye, Google? Not entirely. In May 2015, Mozilla alumni Brendan Eich and...

Brave Now Lets You Customize Search Results—for Better or Worse

The privacy-focused company's new Goggles tool allows users to weed out the noise—whatever that might mean...

Malicious code in brave-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9f4c68463c1bdbbe469fe5c68d3f23d50379a0939a8f9155610ced839c30806 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-core-crx-packager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d659bff6641ae2eba134b7096de9c5134287f99bb6aad5396c9f30be533d099 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc50cd5d32f408d873606c4837a20d8bbe471d478d7d7f5a1a2b21112eedfdab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-research-participation-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aabb0d4d11817436c523cc8b6a7cec461ac62c46889ef22bddae8fb9a66a6e4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aacc360cc09bd65e62d9c77b71ca5869656bf12e6dfc5bd4af918c92fd090ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-eyeshade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b98266ecc97d2f75d0205a22099ac12a97fe82560bebd28e28ee8713ec21778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1670 Malicious code in brave-core-crx-packager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d659bff6641ae2eba134b7096de9c5134287f99bb6aad5396c9f30be533d099 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1672 Malicious code in brave-eyeshade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b98266ecc97d2f75d0205a22099ac12a97fe82560bebd28e28ee8713ec21778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1674 Malicious code in brave-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9f4c68463c1bdbbe469fe5c68d3f23d50379a0939a8f9155610ced839c30806 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1671 Malicious code in brave-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc50cd5d32f408d873606c4837a20d8bbe471d478d7d7f5a1a2b21112eedfdab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1673 Malicious code in brave-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aacc360cc09bd65e62d9c77b71ca5869656bf12e6dfc5bd4af918c92fd090ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-bitgo-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc083f0135dbe25e14931c86c5bb99d26642341eca8c6ac96803a1fff4cec2ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...