Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox Ravie LakshmananSep 09, 2026Vulnerability / Browser Security Google on Thursday…
Tag: CVE-2026-11645
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day Ravie LakshmananSep 04, 2026Vulnerability / Browser Security Google on Thursday released security…
StrikeShark Campaign Uses Novel SharkLoader Malware to Deploy Cobalt Strike Beacon
A newly identified cyber attack campaign, tracked as StrikeShark by Kaspersky, is deploying a previously undocumented malware family called SharkLoader to deliver…
Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign
A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as part of cyber attacks…
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
A high-severity flaw in Amazon Q Developer could allow a malicious repository to execute commands and steal a developer's cloud credentials. The…
New Linux ‘pedit COW’ Exploit Grants Root Access by Poisoning Cached Binaries
A critical vulnerability in the Linux kernel's traffic-control subsystem, tracked as CVE-2026-46331 and nicknamed 'pedit COW,' allows a local unprivileged user to…
DirtyClone Linux Kernel Flaw CVE-2026-43503 Allows Local Privilege Escalation to Root
A new Linux kernel privilege escalation vulnerability, tracked as CVE-2026-43503 and nicknamed DirtyClone, has been publicly disclosed with a working exploit. Discovered…
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability affecting PTC Windchill PDMlink and PTC…
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack
Cybersecurity researchers have flagged a new evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family,…
Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant
Microsoft has issued a warning about an active phishing campaign targeting hotels and hospitality organizations across Europe and Asia since April 2026.…