Topic
Safari
Privacy-Focused Browser Tool Compresses PDFs Locally Without Uploading Sensitive Documents
Privacy & Surveillance
Why HTTP to HTTPS Redirects Fall Short: Risks of Exposed Requests and the Role of HSTS Preload
Other
CISA Adds Ray AI Framework Flaw CVE-2025-62593 to KEV Catalog After Confirmed Exploitation
Vulnerabilities & ExploitsBrowser Privacy Ranking 2026: Tor Browser Leads at 9.5 While Chrome and Yandex Rank Lowest
SecurityLab.ru has published a detailed 2026 browser privacy ranking that evaluates major browsers across six criteria including initial network behavior, site isolation, fingerprint resistance, funding model, configurability, and code auditability. Tor Browser scores highest at 9.5 for its comprehensive protections including unified fingerprinting and layered JavaScript controls, followed by Mullvad Browser at 9.0 and LibreWolf at 8.5. Brave earns 7.5 for built-in tracker blocking but faces criticism over default telemetry and cryptocurrency features. Firefox scores 6.0 out of the box yet reaches 8.5 after extensive configuration, while Google Chrome, Microsoft Edge, Opera, and Yandex Browser occupy the bottom positions due to persistent tracking mechanisms and closed-source components. The report also highlights the Local Mess localhost tracking technique used by Meta and Yandex that bypassed browser isolation entirely.
Zoom Patches Zoomsday Vulnerability Enabling Remote Code Execution in Meetings
Zoom has addressed four vulnerabilities that could allow attackers to compromise meeting participants, including flaws leading to remote code execution without any victim interaction. The most severe issue, CVE-2026-53413, rated 8.3 and nicknamed Zoomsday, resides in the annotation feature used for drawing, highlighting, or adding text during screen sharing. This component processes network data using fixed 128-byte buffers without proper size validation, enabling memory corruption that alters program execution flow. Researchers demonstrated the attack on macOS by silently launching Safari on the victim's machine. The flaws affect Zoom Workplace, Zoom Rooms, Meeting SDK, and VDI clients. Users must update to patched versions such as Workplace 7.1.5 or 7.0.6, and Zoom Rooms or Meeting SDK 7.1.5 to mitigate annotation-related risks. No active exploitation has been observed publicly, yet centralized enterprise deployments require priority updates since attacks can occur during live meetings.
Yandex Pay App Permanently Removed from App Store Across All Regions Due to Sanctions
The Yandex Pay application has been fully removed from the App Store in every region worldwide. Existing installations continue to operate normally, and the company has confirmed that all client funds remain secure. However, users can no longer download the app or receive updates, prompting Apple device owners to avoid deleting the application. Yandex recommends disabling automatic app updates through iOS settings to prevent any potential loss of functionality. If the app is accidentally removed, the service remains accessible through the web version at pay.yandex.ru, which can be added to the home screen via Safari. The removal occurs amid broader sanctions and information-related restrictions affecting Russian technology services.