{"data":{"id":"7c4c82e3-862c-44fc-a9e8-b2155aa72db4","title":"Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections","summary":"Google has added new Chrome protections against scams and social engineering, including two-level site warnings, server-side Gemini analysis for Enhanced Protection users, and detection of ClickFix commands copied to the clipboard. Chrome also now asks users for approval before connecting to a site over unencrypted HTTP, a setting Google has turned on by default for everyone.","solution":"Chrome now shows a prompt before connecting to a site over unencrypted HTTP, and the feature is on by default for all users. Enhanced Protection users also receive the Gemini and ClickFix protections.","labels":["security","industry"],"sourceUrl":"https://www.securityweek.com/google-hardens-chrome-against-clickfix-attacks-insecure-http-connections/","publishedAt":"2026-10-21T17:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google"],"affectedVendorsRaw":["Gemini"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-21T17:00:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.6,"researchCategory":null,"atlasIds":null}}