← All stories

Vulnerabilities

Chrome's Enhanced Protection to Flag Malicious Commands Disguised as Fixes

By Help Net Security1 min read

Google is updating Chrome's Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command, according to Help Net Security.

Cover for a vulnerabilities story

Google is rolling out updates to Chrome's Enhanced Protection mode that target a growing social engineering tactic: scam pages that persuade users to copy and run malicious commands under the guise of a fix or verification step. According to Help Net Security, the updated browser will detect such scam websites and warn users when a page attempts to trick them into copying a malicious command.

Enhanced Protection is the stronger tier of Chrome's Safe Browsing feature, which Google introduced in 2020 to combat online scams and social engineering. Rather than relying solely on a locally stored list of known bad sites, the mode performs more proactive checks to catch previously unseen threats.

Google claims that continued improvements to the feature have made Enhanced Protection users ten times safer from phishing, social engineering, notification abuse, and other scams compared with those who remain on the default Standard Protection tier. The company says this figure is based on its internal measurements, though the report excerpt does not detail the exact methodology behind the comparison.

The new warning addresses a technique frequently seen in so-called ClickFix-style campaigns, where victims are shown fake error messages, CAPTCHA prompts, or software update notices and instructed to paste a command into a terminal or run dialog. Executing that command typically downloads and launches malware, giving attackers a foothold on the victim's machine.

By intervening at the moment a user is about to copy such a command, Chrome aims to break the attack chain before any code runs. Users who want the additional safeguards can enable Enhanced Protection in Chrome's security settings.

Source: Help Net Security

Cover for a vulnerabilities story

Vulnerabilities

Brotli Compression Bug (CVE-2026-111497) Reaches Far Beyond Node.js

A remotely exploitable out-of-bounds write flaw in Google's widely used Brotli compression library, publicly disclosed by Node.js on October 21, 2026, affects software well beyond the Node.js ecosystem, Help Net Security reported. Attackers who can get an application to decompress crafted Brotli data via node:zlib can corrupt process memory, potentially causing crashes or memory disclosure.

1 min read

AI-written summary Source: Help Net Security · Fetched

Cover for a vulnerabilities story

Vulnerabilities

Hackers Flood Inboxes With Spam, Then Pose as IT Support on Microsoft Teams

Attackers are flooding employees' inboxes with spam and then contacting them on Microsoft Teams posing as IT help desk staff, offering to fix the very problem they created. Arctic Wolf documented more than 400 incidents involving abuse of the Teams external chat feature, Help Net Security reports.

1 min read

AI-written summary Source: Help Net Security · Fetched

How to read this

Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.