-
A software supply chain campaign that hijacked AOMEI Technology’s update infrastructure to distribute hidden backdoors. Tracked as UNC7017, the attackers briefly altered server configurations between April and July 2026, then restored legitimate conten…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support vulnerability as a zero-day in late August 2026 weeks before BeyondTrust disclosed it on October 15. Mandiant, which investigated the incident, found the attackers…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has awarded XBOW $250,000 for creating an AI-assisted exploit chain that enabled code execution outside the Chrome browser’s renderer sandbox on Windows. This reward marks the first full-chain payout for Chrome under Google’s vulnerability…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google is reportedly testing a new Gemini Desktop feature that could give its AI agent extensive control over a user’s Mac. This includes access to files, interaction with installed applications, and network communication, all with fewer prompts requir…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has stopped accepting new “product vulnerability” reports through its Open Source Software Vulnerability Reward Program (OSS VRP) due to a significant increase in automated submissions that are predominantly invalid. This restriction…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has disclosed that PageBreak, an internal AI security agent developed by its Product Security team, has identified and validated more than 500 cross-site scripting (XSS) vulnerabilities across the company’s first-party web applications, includin…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has released Chrome version 154 for desktop platforms, addressing 32 security vulnerabilities, including a critical buffer overflow flaw in the ANGLE graphics translation layer. This update is being rolled out as version 154.0.8037.92/.93 for Wi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A malicious Firefox extension masquerading as a PDF identity-verification utility has been found targeting Google accounts through session-cookie theft and automated account-takeover activity. The campaign is notable because the add-on initially contai…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
