> TritonInfoSec News
Home / Jul 30, 2026 / Story
0
#7 The Hacker News general July 29, 2026 at 11:57 UTC

Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser

By [email protected] (The Hacker News)

AI Summary

Nebula Security researcher Eten Zou demonstrated that CVE-2026-10702, a patched Firefox JIT compiler flaw, can be triggered by a single malicious webpage visit with no user interaction beyond navigation, achieving arbitrary code execution in the browser's renderer process. Critically, the same vulnerability was confirmed to affect Tor Browser, putting anonymity-seeking users at heightened risk. Mozilla rated it High severity and addressed it in Firefox 151.0.3.

Read full article → https://thehackernews.com/2026/07/researchers-show…

Relevance score: 80.0/100

# More from July 30

  1. 1
    Russian hackers exploit Exchange OWA zero-day for long-term mailbox access BleepingComputer
  2. 2
    Cisco warns of FMC static credential flaw exploited in zero-day attacks BleepingComputer
  3. 3
    Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape The Hacker News
  4. 4
    Hackers target over 30 Minnesota water utilities in coordinated OT attack BleepingComputer
  5. 5
    OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach The Hacker News
  6. 6
    Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass The Hacker News
  7. 8
    Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory The Hacker News
  8. 9
    Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare BleepingComputer
  9. 10
    A little-known npm package was North Korea’s warm-up act for the axios hack CyberScoop