CVE-2026-15903: V8 JavaScript Engine Out-of-Bounds Vulnerability
CVE-2026-15903 is a high-severity vulnerability (CVSS 8.8) in the V8 JavaScript engine, discovered by OpenAI's GPT-5.6-Cyber model. It involves an out-of-bounds read…
Tag: Google
Researchers Pose as Fake Crypto Startup to Hire Suspected North Korean IT Workers
Security researchers created a fictitious cryptocurrency startup and hired three individuals they believe were North Korean IT operatives, as part of an…
SynthID: Google’s Invisible Watermark for AI-Generated Images
SynthID is an invisible watermark embedded by Google in images created or edited by its AI tools. It was detected in a…
Chrome Remote Desktop: Remote Access Tool Used by Operatives
Chrome Remote Desktop is a remote access tool that allows users to control computers remotely. A suspected North Korean operative installed it…
Malicious SIM Cards Can Execute Code on Cellular IoT Modems, Researchers Find
Researchers at the University of Birmingham and the security firm Fuzzware have discovered that a malicious SIM card can execute attacker-controlled code…
New Passkey Attacks Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three independent research efforts presented at Black Hat USA 2026 and in subsequent disclosures have demonstrated practical attacks against passkey implementations, undermining…
New CSS Attacks Break Webmail Defenses to Steal Passwords and Tokens
New research presented at Black Hat USA 2026 reveals that CSS and HTML techniques can break out of email message boundaries to…
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to the data extortion group…
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
Security researchers at Novee Security have uncovered critical vulnerabilities in AI coding agents from Anthropic, Google, and OpenAI. The flaws allow an…
CVE-2026-12537: Critical OS Command Injection in Gemini CLI
CVE-2026-12537 is a critical OS command injection vulnerability in Google's Gemini CLI container launcher. It allows an unprivileged attacker to execute arbitrary…