🕵️ RESEARCH & DEEP DIVES
- Google Chrome to block New Tab hijacker extensions by default on unmanaged devices
Google Chrome will block policy-installed extensions that hijack the New Tab page or search engine on unmanaged devices.
- Applies to unmanaged Windows and macOS consumer devices running Chrome
- Blocks extensions force-installed by local policies that hijack New Tab page or change default search engine
- Prevents malware from abusing enterprise policies to lock in hijacker extensions
- Stops repeated installation attempts and disables conversion of user-installed extensions into locked policy extensions
- Feature not yet released; under review in Chromium Gerrit with metrics and admin override planned 📎 Coverage: bleepingcomputer.com · 👁 via BleepingComputer
🔓 CVEs & KEV
- CVE-2026-10774 — CVSS 2.4 — PSA key-slot leak in Bluetooth Mesh subnet deletion leading to resource exhaustion and potential denial of service