CISA has added a critical Google Chromium V8 type confusion vulnerability, tracked as CVE-2026-85046, to its Known Exploited ...

Magento zero-day vulnerability CVE-2026-75650 exploited a fully patched store for three days before Adobe released APSB26-146 on September 7. A self-updating Rust backdoor survived the patch, evaded ...

Microsoft 365 phishing MFA bypass platform BigBear 2.0 compromised 258 organizations across 40+ countries by using custom JavaScript to disable FIDO2 hardware key authentication before stealing authen ...

The Sality botnet disruption blocked new payloads, CrowdStrike says, but installed crypto-address-swapping malware still ...

A financially motivated actor used an autonomous multi-agent framework to compromise thousands of third-party credentials in ...

Researchers found a phishing service relaying live Google sign-in sessions to intercept passwords, 2FA codes, and active ...

Attackers persuade employees to accept a remote-control request during screen sharing or to open Quick Assist and provide its ...

Cisco Systems Inc.’s Talos Threat Intelligence group today detailed two ClickFix campaigns that push the technique past the ...

Google has released a new security update for the Chrome browser, addressing a total of 12 vulnerabilities. Among these is a ...

Google has released an important security update for Chrome users after fixing 12 vulnerabilities in the browser, including a ...

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog.

Chrome's sixth exploited zero-day of the year was patched on 3 September. On 11 September the Cyber Resilience Act starts a ...