With this many exploits and, presumably, actors having access to their own, unpublished 0-days, doesn't it make sense to at least run the browser in isolated environment nowadays? I insist on installing everything from the package repository, but Flatpak/sandboxing may make more sense for a browser that is the biggest attack surface on a day-to-day device.
2 comments
[ 0.15 ms ] story [ 12.0 ms ] thread- Linux kernel 0click "packet to root" RCE (!!!!!) - Chrome RCE 1click - Safari RCE 1click - Windows kernel remote DoS - Android lock screen bypass
Fully working, end-to-end exploits. Prompting was minimal like "pls make RCE"
And this is just cyber. Imagine what this will mean in 12 months for bio, drones, robotics, etc, etc