Huit clés privées de l’autorité de certification eMudhra étaient tellement faibles qu’elles pouvaient être retrouvées presque instantanément. Révélé le 20 octobre 2026, l’incident permet de fabriquer de faux certificats pour usurper l’identité de sites web auprès de logiciels vulnérables. Les principaux navigateurs ont réagi, mais les correctifs doivent encore atteindre de nombreux autres outils.

OpenAI has updated its ChatGPT Chrome extension to let users access information from their open browser tabs. A demo video shows the new functionality in action. The Verge reports: It's also updated ChatGPT in the sidebar, with the full power of ChatGPT and your entire conversation history in Chat or Work to use without leaving the page you're viewing. It also enables ChatGPT Work to "control" your Chrome tabs for tasks like "sending messages, filling out forms, or downloading files," similar to Google's Gemini-powered "auto browse" feature, as well as organize or group open tabs.

Read more of this story at Slashdot.

Sans rien installer ni configurer d'émulateur, des internautes lancent de gros jeux vidéo dans un simple onglet de Chrome. Des portages non officiels font tourner dans le navigateur d'anciens épisodes de grandes séries, comme GTA V, Halo: Combat Evolved ou le mode Zombies de Call of Duty: Black Ops.

Google has released Chrome 155 with support for decoding JPEG XL images, a format that offers 30-50% better compression than JPEG along with lossless compression, JPEG transcoding, HDR, animation, and progressive decoding. From a blog post: We expect that JPEG XL is most helpful for high-fidelity or lossless compression, especially of photographic images or in cases in which fine-grained progressive decoding is preferred. In this post, we share why we brought JPEG XL to Chrome, how we used Rust to ensure memory safety first, the extensive performance work that makes it fast, and what the journey tells us about developer feedback and the web standards ecosystem. [...] With JPEG XL officially landing in Chrome, the web becomes faster, richer, and safer. We encourage developers, content creators, and platform owners to start using .jxl images and animations in their pipelines. Try it out, file bugs, and help us continue building a faster and safer web for everyone.

Read more of this story at Slashdot.

En piratant les organismes qui gèrent les extensions .gh, .sl et .as, des pirates ont pu se faire délivrer de vrais certificats de sécurité au nom de Google et d'autres grandes marques, de quoi faire passer de faux sites pour des vrais.

Google says ChromeOS will keep receiving regular updates and security patches through mid-2034, after which qualifying newer Chromebooks will be able to migrate to the new Googlebook OS. 9to5Google reports: Starting with Chromebook updates, Google says that "Chromebooks you have today will continue to receive updates through their supported lifetime," with all Enterprise and Education management capabilities remaining in place as well: "We will maintain support for current Chromebook devices running ChromeOS as outlined in our Auto Update policy and the Chromebooks you have today will continue to receive updates through their supported lifetime..." Google adds that similar management tools will be coming to Googlebook, but they're not available yet. Apparently they're planned for the second half of 2027. Meanwhile, Google says that "many" existing Chromebook models will be eligible to transition from ChromeOS to Googlebook OS. More details are coming "soon." A later note specifies that Google is referring to "newer commercial Chromebook models." Notably, Google specifies a year when ChromeOS updates will come to an end in a later note -- 2034. Chromebooks with a 10-year update policy that extends past 2034 will be eligible to move to Googlebook OS. [...] Finally, in regards to apps, Google says that it is "committed" to web developers despite an increased focus on Android apps on Googlebooks.

Read more of this story at Slashdot.