All articles tagged with #google chrome
Chrome for Android now includes an Appearance menu that lets you customize the New Tab page with your own background image, preset color themes, curated wallpaper collections, and an option to auto-refresh the look daily, rolling out with the latest Chrome update.
Mozilla patched two critical Firefox flaws (CVE-2026-15718/15719) with exploit code public; Google Chrome fixed 15 bugs including two critical Ozone use-after-free issues (CVE-2026-15764/15765). Adobe released security updates addressing 88 vulnerabilities across ColdFusion, Commerce/Magento, Experience Manager, and Illustrator (with several high-severity CVEs). Broadcom also fixed a critical authentication-bypass in VMware Avi Load Balancer (CVE-2026-47865). None are listed as actively exploited yet, but updates are advised as attackers often weaponize these flaws.
Chrome on Android is getting a redesigned bottom navigation bar that adds a Gemini shortcut, enabling deeper Gemini AI integration and multi‑tab access; the rollout is underway with iOS and UK desktop versions planned, though timing remains unclear.
Chrome for Android is rolling out version 150 with a dedicated back button in the three-dot menu, plus a new Site controls option and a rename of "Add to Home screen" to "Install and create shortcut" in a phased rollout.
Chrome and Edge are implementing a feature called Selective format read that questions the clipboard to only paste the required data (such as plain text or HTML) instead of pulling every data type, reducing memory use and speeding up pasting in web apps; the update is live in Chrome and Edge version 149, with Firefox likely to follow and Safari already having a similar approach.
Chrome versions 150 and 151 will remove the last vestiges of Manifest V2 (MV2) by eliminating references to it, ending support for older ad blockers like uBlock Origin. MV2 was phased out in 2024, so only MV3-compatible blockers will work from Chrome 151 onward. Google’s Devlin Cronin notes the change is due to complexity, tech debt, and security risks, pushing users toward MV3 extensions or other browsers.
Google is rolling out Device Bound Session Credentials (DBSC) in Chrome for Windows, binding a login session to the device used to sign in to prevent stolen cookies from being exploited. The rollout, which started May 25, is gradual and should be complete within 60 days, and the feature is enabled by default for Workspace users and personal Google accounts.
Reports say Google Chrome may have quietly downloaded a 4GB on-device AI model called Gemini Nano to some devices without user permission. The model runs locally, assessing tasks like scam-detection and text analysis, and will auto-uninstall if there aren’t enough resources. Users can disable or remove it via Chrome settings or by fully uninstalling Chrome; Mac and Windows steps are provided to check for and delete the model. Privacy concerns and possible legal implications are noted, with Google saying users can turn off or remove the feature if needed.
Security researcher Alexander Hanff revealed that Chrome quietly installs a 4GB weights.bin file for Gemini Nano's on-device AI whenever default AI features are enabled, re-downloading it if the user tries to delete it and offering no consent or transparency. The move has sparked privacy and data-regulation concerns (GDPR), potential environmental impact from emissions tied to widespread device usage, and broad backlash, with Mozilla promising a kill switch and Vivaldi calling for user autonomy while Google remains silent.
A security researcher says Google Chrome secretly stores about 4GB of an on-device Gemini Nano AI model on users’ devices (in a folder called OptGuideOnDeviceModel) without requesting consent. Google claims the on-device model powers security features and can be turned off or removed in Chrome settings, with automatic uninstall if resources are low; some users may still see re-downloads if they haven’t fully disabled it. Users can check chrome://on-device-internals to verify presence and chrome://flags or system settings to disable the feature.
Google is expanding Gemini in Chrome to Asia-Pacific users (Australia, Indonesia, Japan, the Philippines, Singapore, South Korea, Vietnam) after earlier launches in Canada, India, and New Zealand. The built-in chatbot is available on desktop Chrome and on iOS in most markets (Japan on iOS not yet), accessed via the Ask Gemini sidebar with integration to Nano Banana 2 image generation and calendar scheduling; users can unpin the Gemini shortcut if they prefer. Update notes confirm the expansion covers the full Asia-Pacific region.
Google Chrome now offers vertical tabs on the left side, an optional feature you enable by right-clicking the tab bar and selecting Show Tabs Vertically. The layout helps manage many open tabs by keeping the tab headlines visible and can be resized to icons. The feature, first shown in Chrome Canary in late 2025, is rolling out to users alongside a new full-page reading mode for a distraction-free browse.
Google announced it will shift Chrome’s release cadence from four weeks to two weeks, starting with Chrome 153 on Sept. 8, to deliver performance improvements, fixes, and new capabilities faster while reducing post-release disruption.
Chrome is testing quantum-resistant HTTPS that uses Merkle-tree proofs, letting browsers verify certificates with tiny proofs instead of large data; a Tree Head signs millions of certs, keeping the data near 64 bytes. The plan for a broader rollout runs through 2027 with a parallel quantum-resistant trust store and mandatory certificate transparency, while traditional certificates remain as a safety net during the transition.
While browser password managers like Chrome and Safari have improved security and encryption, they still pose inherent risks by consolidating sensitive data in one place, making them less secure than dedicated third-party password managers. Using a browser's password manager is better than reusing passwords or storing them insecurely, but for enhanced security, especially against targeted attacks, third-party solutions with additional features are recommended.