Brave & Microsoft Edge browsers patch a Chromium bug that hides malicious scripts

Let’s be honest, nobody likes uninvited guests hanging around after the party is over. But that’s exactly what a recently patched Chromium vulnerability has been doing inside your browser. Thankfully, Brave is stepping up to the plate today with a crucial update (v1.90.128) that evicts these sneaky, lingering scripts once and for all.

If you use Brave on your desktop, you’ll want to make sure this update is installed. The patch directly addresses a Chromium flaw where malicious websites could abuse the Background Fetch API to plant hidden scripts. The worst part? These invisible gremlins survive browser restarts. Left unchecked, bad actors could use them to track your digital footprints, run malicious code right on your machine, or even rope your device into launching DDoS attacks on others.

What else is new in Brave v1.90.128?

While the Background Fetch API fix is the headliner, the official release notes highlight a few extra housekeeping items under the hood:

• Underlying engine bump: Chromium gets upgraded to version 148.0.7778.217, bringing the browser up to speed with the latest core security standards.
• Wallet security: The team patched a wallet provider binding issue (spotted by shinchan_69) and updated the wallet to better handle “Permit” type warnings in the “Sign” panel (thanks to syarif07). Both bug hunters flagged these vulnerabilities via HackerOne.

Desktop users are likely already receiving the patch automatically. If you want to jump the queue, just head over to Settings > About Brave to force the update. Android users will need to hang tight for just a bit longer, because the fix is currently sitting in the Google Play Store waiting room pending review, but it should roll out shortly.

In classic tech community fashion, fixing a major bug immediately prompted users to ask about the next big feature drop. When one user took to the announcement thread asking for the availability of the Origin update, the official Brave account fired back with a single, tantalizing word: “Soon.” Keep your eyes peeled, as it looks like the Brave team is gearing up for something big.

Microsoft Edge catches up

Not to be left out of the security sweep, Microsoft Edge is also pushing a minor bump to version 148.0.3967.96 on the Stable channel. Don’t expect any flashy new features in the changelog here since this is purely a maintenance release designed to fold in those exact same vital Chromium security patches to keep users safe.

Bottom line? Whether you’re navigating the web with the lion or surfing on the Edge, take two minutes today to check your settings and hit that update button. Your device’s security is absolutely worth the quick restart.

We stand out from the tech-media crowd because we break news stories; we mainly bring you stuff that you won’t find anywhere in the mainstream tech media. Our stories have been picked up by some of the world’s most popular websites and media outlets—more info is available here.