CVE-2026-3545: Critical Sandbox Escape in Chrome Navigation
CVE-2026-3545 is a critical sandbox escape vulnerability in Chrome's Navigation component with a CVSS score of 9.6. It could be exploited to…
Tag: Google
Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet
Amazon Threat Intelligence has attributed the September 2025 hijack of the popular npm packages debug and chalk to North Korea's Sapphire Sleet…
Single Malicious Webpage Visit Can Compromise Tor Browser via Patched Firefox JIT Flaw
Nebula Security researchers have demonstrated that a single visit to a malicious webpage can compromise the Tor Browser by exploiting a patched…
NVIDIA Launches 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
NVIDIA, along with 36 other organizations including Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, Red Hat, and the Linux…
BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate…
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers at Zenity Labs have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents, codenamed AgentForger, that could allow a single…
Google Introduces Selfie Video Recovery for Locked Accounts
Google has announced a new selfie video recovery feature that allows users locked out of their accounts to regain access by recording…
GitHub Slashes Public Bug Bounty Payouts by Half, Launches VIP Tier for Top Researchers
Beginning July 27, 2026, GitHub will reduce public bug bounty payouts by at least 50% across all severity levels, moving top rewards…
Gemini 3.5 Flash Cyber: Google’s AI Model for Vulnerability Discovery
A lightweight AI model fine-tuned to find, validate, and patch software vulnerabilities. In tests, it found 55 unique confirmed V8 issues and…
CodeMender: Google’s Code-Security Agent for AI-Driven Vulnerability Patching
CodeMender is Google's code-security agent that uses Gemini 3.5 Flash Cyber for frequent repository scans, launch reviews, and commit-scanning pipelines. It is…