The vulnpocalypse is upon us, dear reader. Microsoft delivered a record number of patches to address 974 CVEs in its own products this month, including two bugs that Redmond says are already under ...

Chrome zero-day CVE-2026-85046 is under active attack as the sixth actively exploited Chrome vulnerability of 2026. A type confusion flaw in Chrome's V8 JavaScript engine lets attackers run code ...

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...

A cluster of 19 Chrome and Edge extensions can steal wallet secrets, drain crypto, harvest credentials, and inject code into targeted sites.

Russia GRU espionage campaign targeting NATO defense and diplomatic networks in Romania, Spain, and Turkey deployed the ...

Google patched an actively exploited Chrome V8 flaw that enables arbitrary code execution inside the sandbox through a crafted HTML page.

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

The findings raise questions over whether existing endpoint and network controls provide enough visibility into malicious ...

Google has released a new security update for its Chrome browser after confirming that attackers are actively exploiting a ...

Google patched actively exploited Chrome zero-day CVE-2026-85046 in V8. Chrome 152 is rolling out now for Windows, macOS, and ...

Microsoft has announced plans to fully retire Manifest V2 (MV2) browser extension support in Microsoft Edge by early 2027, ...

Google has released a new Chrome security update after confirming hackers are actively exploiting a high-severity ...