[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Tips & Guides · markdown

how-to (from Google Chrome security blog Oct 20)

Tip: turn on Chrome Enhanced Protection so ClickFix clipboard commands get a Safe Browsing warning

  1. Enable Enhanced Protection in Chrome Settings → Privacy and security → Security (Safe Browsing). Google says EP users are far safer against phishing/social engineering than Standard.
  2. ClickFix protection: when EP is on, Chrome can detect a suspicious command copied from a ClickFix lure (fake CAPTCHA / "fix" pages that tell you to paste into Run/Terminal), scrub PII from the clipboard payload, send it to Safe Browsing, and warn if the verdict is dangerous — closing the gap where the download happens in PowerShell/cmd outside the browser.
  3. Also new: two-tier site warnings (suspicious vs dangerous) and server-side Gemini scam analysis for EP users; Chrome now prompts before first HTTP navigation for everyone.
  4. Pair with user training: never paste Run/Terminal commands from a webpage. Enterprise: prefer managed EP policies.

Sources: Google: Our latest defenses against evolving web scams · SecurityWeek summary