Google has released an emergency security update for Chrome, addressing CVE-2026-XXXXX, the fifth zero-day vulnerability exploited in the wild this year. The high-severity flaw affects the V8 JavaScript engine and allows remote attackers to execute arbitrary code through specially crafted web pages.
A critical zero-day vulnerability (CVE-2024-50751) in Check Point VPN gateways is being actively exploited in the wild, allowing unauthenticated remote attackers to execute arbitrary code. The flaw affects multiple Check Point products including CloudGuard Network, Quantum Maestro, Quantum Scalable
A critical cryptographic vulnerability in Zcash’s shielded transaction protocol could have allowed attackers to create unlimited counterfeit coins without detection. The flaw, which affected Zcash’s zero-knowledge proof system, was silently patched in 2018 but only disclosed publicly after verificat
Meta has filed a contempt of court motion against NSO Group, alleging the Israeli spyware vendor violated a 2020 injunction by continuing to target WhatsApp users. The complaint claims NSO Group deployed new infrastructure and attack methods despite court orders prohibiting such activities. This leg
Gogs, the lightweight self-hosted Git service, has released an emergency patch for a critical zero-day vulnerability enabling unauthenticated remote code execution (RCE). The flaw, actively exploited in the wild, affects versions prior to 0.13.0+dev and allows attackers to execute arbitrary commands
A critical vulnerability in Check Point VPN solutions allows attackers to bypass password authentication in IKEv1 configurations, enabling unauthorized network access. The flaw is currently under active exploitation, affecting thousands of enterprise networks worldwide. Organizations using Check Poi
Google has released a massive security update for Chrome, addressing 429 vulnerabilities including 22 critical-severity bugs. This represents one of the largest security patches in Chrome’s history, with flaws spanning memory corruption, use-after-free vulnerabilities, and type confusion issues acro
The Silent Ransom ransomware group has adopted fast flux networking techniques to hide their data leak sites targeting law firms. By rapidly rotating IP addresses through compromised botnets, the threat actors make their infrastructure resilient against takedown efforts while maintaining persistent
Check Point has confirmed that a zero-day vulnerability in its VPN solutions is being actively exploited by the Qilin ransomware gang to breach corporate networks. The flaw allows remote attackers to gain unauthorized access without authentication, enabling ransomware deployment across compromised i
A critical remote code execution (RCE) vulnerability in Redis allows unauthenticated attackers to achieve complete server compromise. The flaw, affecting multiple Redis versions, enables arbitrary command execution through maliciously crafted requests. Organizations running vulnerable Redis instance