An HTTP Intercepting Proxy with Chrome DevTools Protocol (CDP)

Author: Denis Andzakovic Published: July 29, 2026 Source: https://pulsesecurity.co.nz/articles/glorp-cdp-support Summary Pulse Security’s Denis Andzakovic describes a new logging mode added to Glorp, an open-source HTTP intercepting proxy, that captures browser traffic using the Chrome DevTools Protocol (CDP) instead of a traditional man-in-the-middle setup. Rather than terminating TLS via an HTTP CONNECT tunnel and a trusted … Read more

Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307

Author: Nebula Security Published: June 29, 2026 Source: https://nebusec.ai/research/v8-cve-2026-6307-writeup/ Summary Nebula Security published a technical writeup, dubbed “Longinus,” of CVE-2026-6307, a high-severity flaw in Google Chrome’s V8 JavaScript engine. The bug lives in the TurboFan JIT compiler and is notable because a single vulnerability crosses two security boundaries at once: it yields a stable arbitrary … Read more