Web & App Security

OWASP, APIs, authentication, supply chain and DevSecOps.

Most important this week

ElevatedBe aware

Beta Channel Update for ChromeOS / ChromeOS Flex

The Beta channel is being updated to OS version 16820.18.0 (Browser version 155.0.8059.31) for most ChromeOS devices. If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS communities General: Chromebook Help Community Beta Specific: ChromeOS Beta Help Community Report an issue or send feedback on Chrome Interested in switching channels? Find out how. Andy Wu …

Google Chrome Releases10 hours agoHomeSMBEnterprise

ElevatedBe aware

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP).

SecurityWeek15 hours agoDevelopers

ElevatedBe aware

Google halts open-source bug bounty program amid AI spam surge

Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports.

BleepingComputer21 hours agoDevelopers

All Web & App Security stories

10 hours ago

Web & App Security

Most important this week

Beta Channel Update for ChromeOS / ChromeOS Flex

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

Google halts open-source bug bounty program amid AI spam surge

All Web & App Security stories

Beta Channel Update for ChromeOS / ChromeOS Flex

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

Google halts open-source bug bounty program amid AI spam surge

Chrome Dev for Desktop Update

Chrome Dev for Android Update

Extended Stable Update for Desktop

GitLab warns of critical RCE vulnerability in AI Gateway service

The EDR blind spot: 3 ways browser attacks evade endpoint telemetry

AI Agents Aimed SQL Injection at US and Canadian Government Sites

Chrome for Android Update

Stable Channel Update for Desktop

Dev Channel Update for ChromeOS / ChromeOS Flex

CISA Malcolm

Armatura LLC Armatura One

The Fine Art of Frustrating the Adversary

500,000 Active Credentials Left Exposed on GitHub

DIVD says Zammad zero-days enabled AI-driven network breach

Early Stable Update for Desktop

Chrome for Android Update

Over 543,000 valid credentials exposed in public GitHub repositories