Chrome Zero-Day, 'FoxyWallet' Firefox Attacks Threaten Browsers
ID: 88ee7dac-df93-5618-8564-27b2b0bd6a64
STIX ID: report--88ee7dac-df93-5618-8564-27b2b0bd6a64
Feed Name: Dark Reading
Date Published: 2025-07-01
Date Updated: 2026-04-21
Author: Elizabeth Montalbano, Contributing Writer
The report details two concurrent browser threats: an actively exploited Chrome zero-day (CVE-2025-6554), a V8 type-confusion bug enabling remote code execution that Google patched urgently, and a widespread Firefox extension campaign called "FoxyWallet" (45 malicious add-ons, seven still live) impersonating crypto wallets to exfiltrate secrets; organizations are advised to apply Chrome updates immediately and treat browser extensions like software (use allowlists and continuous monitoring).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.