“Google”

Insurance-targeted phishing now triggers immediate real-time account hijacking rather than delayed credential theft for timely money transfer fraud.

Chaos/msaRAT abuses headless Chrome and Edge for covert C2 channels, complicating detection and network-based controls.

Microsoft released its largest Patch Tuesday, fixing hundreds of CVEs including two zero-days actively exploited, requiring prioritization.

Anthropic's Claude for Chrome extension has exploitable flaws enabling extensions to read Gmail, Docs, and Calendar data.

Google's Chrome 150 fixes 27 vulnerabilities, including 13 use-after-free bugs and two critical flaws.

Wiz-discovered GhostApproval symlink flaw lets six AI coding assistants run attacker-controlled code by tricking file approvals.

GigaWiper backdoor combines disk-wiping, overwriting, and fake ransomware behaviors to deliver destructive Windows intrusions.

RedWing Android malware rented on Telegram enables bank fraud, stealing credentials and OTPs via device takeover.

Januscape KVM vulnerability enables VM escape to execute code on hosts across Intel and AMD platforms.

Law enforcement and industry partners disrupted a vast proxy network, cutting off millions of compromised devices and reducing attack surface.

Unprivileged users can escalate to root via a race condition in epoll, enabling OS-level compromise on Linux and Android systems.

Threat actors redirect audit logs and telemetry to attacker storage; tighten bucket controls.

Chrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.

Zero-day CVE-2026-20245 was exploited for months before Cisco patching; rapid mitigation and monitoring recommended.

Chrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.

Zero-day CVE-2026-20245 was exploited for months before Cisco patching; rapid mitigation and monitoring recommended.

Spyder and MaXSS flaws in AI-powered Chrome extensions enable session hijacks and data access.

Chrome 149 patches 28 flaws, including use-after-free issues; hardening Chrome remains a priority for enterprise endpoints.

Chrome emergency patch closes a zero-day actively exploited, preventing remote code execution in many deployments.