Chromium Docs - Post-Spectre Threat Model Re-Think

RKNF404/chromium-hardening-guide

Harden chromium (somewhat) for privacy and security (and performance)

What Spectre and Meltdown Mean For WebKit

Security researchers have recently uncovered security issues known as Meltdown and Spectre.

Electron Spins: a special case of Chromium mods | Little Bear Labs

John's a dev who likes to build to last; most known for his work in native-compiling languages like Rust & C++. Dive deep or collaborate: why not both?

How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865

In March, our system detected a severe vulnerability in V8, the JavaScript engine used by Chrome. This vulnerability enabled remote code execution against billions of Chrome users worldwide.

b4a1ffc010a8aee9b98d4fdcf3d396b592cffa46 - chromium/src - Git at Google

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

ChromeAlone - A Browser Based Cobalt Strike Like C2 Tool That Turns Chrome Into a Hacker’s Playground

ChromeAlone — a Chromium-based browser Command & Control (C2) framework capable of replacing traditional offensive security implants like Cobalt Strike.

Chromium Docs - The Rule Of 2

When you write code to parse, evaluate, or otherwise handle untrustworthy inputs from the Internet — which is almost everything we do in a web browser! — we like to follow a simple rule to make sure it's safe enough to do so. The Rule Of 2 is: Pick no more than 2 of

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blog

A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.

secureblue/Trivalent

A security-focused, Chromium-based browser for desktop Linux inspired by Vanadium.

2025 Chromium Embedding: Experiences and challenges

Web Engines Hackfest. Contribute to Igalia/webengineshackfest development by creating an account on GitHub.

Meltdown, Spectre, and the Costs of Unchecked Innovation

Spectre fixes forced browsers to break the compatibility covenant of the web. Other unchecked technologies could cause even deeper damage.

ChromeAlone/BLOWTORCH at main · praetorian-inc/ChromeAlone

A tool to transform Chromium browsers into a C2 Implant - praetorian-inc/ChromeAlone

Announcing Supporters of Chromium-based Browsers

Since Google announced the Chromium project in 2008, we have been excited to build on the great foundations of open-source web browsers and contribute to the continued d…

Decoupling Extensions from Chrome: The Journey to a Modular Extensions Layer · Issue #74 · Igalia/webengineshackfest

Facilitator(s) @MyidShin @ltilve Summary This talk presents the ongoing effort to decouple Chromium Extensions from the Chrome layer, enabling a more modular and embeddable architecture. We’ll cove...

How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories - Kudelski Security Research Center

Aug 19, 2025 - Nils Amiet -

Stronger with every update: How we’re making Chrome and the web safer in the AI Era

Chrome uses Gemini AI to automate vulnerability discovery, triage, and patching, accelerating updates to match modern security risks.