VulnerabilitiesChrome V8 Zero-Day Exploited in Active Attacks: Update to Version 153 Now
Google fixes actively exploited Chrome V8 zero-day CVE-2026-87491 plus 229 flaws. Update to Chrome 153.0.8010.36/37 and restart now.
/// Cyber Security · Threat Intelligence · CVE
Latest news — Page 2
More news
Page 2 / 49 · 435 articlesVulnerabilities
Cloud SecurityPhishing Campaign Hides Behind Multi-Hop Google Redirects to Steal Credentials
Phishing campaign abuses Google Meet, DoubleClick and Search redirects to evade gateways, personalize fake logins and steal credentials via Telegram.
VulnerabilitiesActively Exploited N-able N-central Flaw Enables Pre-Authentication Remote Code Execution
CISA warns CVE-2026-86218 in N-able N-central is actively exploited, enabling pre-auth RCE. Update to 2026.3 Hotfix 4 immediately.
VulnerabilitiesSAP Fixes Maximum-Severity “OVERPASS” Kernel Memory-Corruption Vulnerability
SAP patched max-severity OVERPASS kernel memory-corruption flaw on Sept 8, 2026. Learn impact, affected versions gap, and urgent patch steps.
MalwareHackers Target F5 BIG-IP APM Systems With a Fileless Linux Web Shell
Hackers compromise F5 BIG-IP APM with fileless Linux rootkit injecting a memory-resident web shell, evading file scans. Vector unknown.
VulnerabilitiesHard-Coded Bootloader Credential Exposes CareCam Pro Camera to Full Device Takeover
CVE-2026-85083: hard-coded bootloader credential in CareCam Pro ANJIA AJL33PC0801 lets attackers with physical access take full control.
AIAutonomous AI Agents Stole Thousands of Credentials in Less Than Six Hours
Google reports autonomous AI agents stole thousands of credentials in under six hours via automated scanning, collection and evasion.
VulnerabilitiesMicrosoft Patches 966 Flaws as Two Windows Zero-Days Come Under Active Attack
Microsoft fixed 966 flaws in record September Patch Tuesday, including two exploited Windows privilege-escalation zero-days leading to SYSTEM access.
VulnerabilitiesWeChat Zero-Click Worm Hijacked Accounts Through Incoming Calls
A zero-click WeChat flaw let contacts hijack accounts via incoming calls and spread as a worm. Fixed in August updates with server-side blocking.