News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 9 Oct· 1 article
-
Hackers Earn $562,500 for Three Remote Exploits on Pixel 10
Three teams demonstrated remote exploits against Google’s Pixel 10 at Pwn2Own Ireland on 8 October 2026, with the event confirming patches were required for targets. The Pixel 10 entries were remote exploits, meaning breaches were delivered via web content…
Wed 7 Oct· 3 articles
-
Google Chrome2 articles this day · SecurityOnline first
Chrome 155 patches 247 flaws, including four critical use after free bugs · Google Chrome 155 fixes 247 flaws, including four critical bugs
-
Chrome 155 patches 247 flaws, including four critical use after free bugs
Google has released Chrome 155, addressing a total of 247 vulnerabilities across desktop and Linux builds. Four of these are critical-use-after-free flaws affecting Chrome’s Chromecast, Browser, Navigation, and Track components. The tracked CVEs are…
-
Google Chrome 155 fixes 247 flaws, including four critical bugs
Google has pushed Chrome 155 to the Stable channel, delivering a substantial security update that fixes 247 flaws, including four critical use-after-free (UAF) bugs. The release addresses a total of six CVEs, with the four critical UAFs ranked at the top of…
-
-
Google Fixes Critical Chrome Flaws That Could Enable Remote Code Execution
Google has released updates for Chrome and ChromeOS on 6 October 2026, addressing a set of critical security flaws. The Desktop Stable Channel Update brings Chrome to version 155.0.8059.39 for Linux and 154.0.8037.39/40 for Windows and Mac. The Chrome update…
Fri 2 Oct· 1 article
-
Chrome Update Fixes Critical WebGL Flaw Enabling Sandbox Escape
Google has released Chrome 154.0.8037.97 (and 154.0.8037.98 on the Stable channel) to address a raft of 11 security bugs, led by a critical WebGL flaw that could allow remote code execution outside the browser sandbox. The bug, CVE-2026-103628, is an…
Wed 30 Sep· 1 article
-
Chrome and Firefox Fix More Than 100 Flaws, Including Critical Bug
Google and Mozilla released Chrome and Firefox updates addressing more than 100 vulnerabilities. Chrome’s September 2026 update fixes 32 security defects, including a critical-severity buffer overflow in ANGLE tracked as CVE-2026-102331, reported by an…
Tue 29 Sep· 1 article
-
Google Patches Critical Chrome Flaw Among 33 Security Bugs
Google has issued a Chrome security update, bumping to version 154.0.8037.92/.93, to fix 33 flaws. The standout issue is CVE-2026-102331, described as a critical ANGLE buffer overflow that could corrupt memory during rendering crafted content. The update…
Thu 24 Sep· 1 article
-
Chinese Hackers Exploited Chrome and Windows Zero Days in Espionage Attacks
A suspected Chinese state-sponsored espionage group tracked as UTA0565 used zero-day vulnerabilities in Google Chrome and Microsoft Windows to target Asian government bodies, think tanks and policy researchers. According to Volexity, attacks began in early…
Tue 22 Sep· 1 article
-
Android Telecom Flaw Lets Apps Execute Code in the System Server
CVE-2026-49881 is a high-severity vulnerability in Android’s Telecom service, affecting Android 16 QPR3 and later releases, including stable Android 17 builds from the Android Open Source Project. The flaw is rated CVSS 7.8. According to the report, an…
Fri 18 Sep· 1 article
-
Google Patches Two Critical Chrome Flaws That Enable Code Execution
Google released Chrome security updates on 17 September 2026 to address 16 vulnerabilities. The flaws include two described as critical: CVE-2026-93374, a use-after-free issue in the Dawn graphics library, and CVE-2026-93372, a buffer overflow in WebGL. Both…
Thu 17 Sep· 1 article
-
CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. They are CVE-2026-76460 in Cisco Identity Services Engine (ISE), rated CVSS 10.0;…
Wed 16 Sep· 9 articles
-
Browser Extensions Hijacked AI Assistants in Five Major Browsers
On 16 September 2026, Forever Security disclosed BragJack, a proof-of-concept attack that hijacks built-in AI assistants in five browsers: Google Chrome with Gemini, Microsoft Edge, Opera Neon, Perplexity Comet and Claude in Chrome. Researcher Gal Weizman…
-
Google Android6 articles this day · SecurityOnline first
Actively Exploited Pixel Modem Flaw Bypasses Permission Checks · Google Fixes Exploited Pixel Modem Flaw in September Update
-
Actively Exploited Pixel Modem Flaw Bypasses Permission Checks
CISA added CVE-2026-58704 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. The vulnerability affects Google Pixel devices and is an improper authorisation flaw in the cellular modem that may allow attackers to bypass permission…
-
Google Fixes Exploited Pixel Modem Flaw in September Update
Google’s September 2026 Pixel security update fixes CVE-2026-58704, a high-severity cellular modem vulnerability with a CVSS score of 8.0. The flaw is a permission bypass caused by a logic error, potentially allowing remote, proximal or adjacent privilege…
-
Google Patches Pixel Zero Day Exploited in Targeted Attacks
Google has patched a high-severity zero-day in the modem component of Pixel smartphones after observing “limited, targeted exploitation”. Tracked as CVE-2026-58704, the vulnerability results from a logic error that can allow a permission bypass and remote…
-
CISA Warns of Active Exploitation in Google Pixel Vulnerability
CISA added CVE-2026-58704, described as a Google Pixel improper authorisation vulnerability, to its Known Exploited Vulnerabilities (KEV) Catalog on 16 September 2026. The agency said the addition was based on evidence of active exploitation, but did not…
-
Google Patches Pixel Modem Flaw Exploited in Targeted Attacks
Google’s September 2026 Pixel Update Bulletin fixes 110 vulnerabilities, including CVE-2026-58704, which Google says may be under limited, targeted exploitation. The high-severity flaw is in the phones’ cellular modem and results from a logic error that can…
-
Google Patches Pixel Modem Flaw Exploited in Targeted Attacks
Google’s 16 September 2026 Pixel Update Bulletin addresses three Android vulnerabilities, including CVE-2026-58704, which Google says may be undergoing limited, targeted exploitation. The flaw affects the cellular modem firmware and is rated 8.0 under…
-
-
Google and Mozilla Patch 115 Browser Flaws, Including Critical Bugs
Google and Mozilla have released browser updates addressing 115 security vulnerabilities in total. Chrome 153 fixes 42 defects, including three critical issues: CVE-2026-91726, an out-of-bounds read in WebGL, and CVE-2026-91721 and CVE-2026-91749,…
-
Google Chrome 153 Fixes Critical WebGL Flaw Enabling Code Execution
Google has released Chrome version 153, fixing 42 security defects, including three vulnerabilities highlighted in the report. CVE-2026-91749 is rated critical with a CVSSv3 score of 9.6 and involves an out-of-bounds read in the WebGL component.…
Tue 15 Sep· 1 article
-
China-Linked Groups Exploited Chrome Patch Gap to Target NGOs
Two China-linked threat groups used the same Chrome and Windows exploit chain against non-governmental organisations (NGOs), according to Volexity. The activity began on 1 September 2026, when UTA0560 sent spear-phishing emails directing targets through a…
Sat 12 Sep· 1 article
-
Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge
BlueMoon is an exploit kit that security researchers say was rapidly adopted by multiple espionage groups in opportunistic, rushed campaigns. The China-linked Violet Typhoon (also known as APT31, JungleBamboo, TA412 and Tide Castle) first deployed BlueMoon…
Fri 11 Sep· 1 article
-
China-Linked Hackers Exploit Sogou Flaw to Deploy GRAYRABBIT Backdoor
A China‑linked threat group known as UNC3569 exploited a flaw in Sogou Input Method for Windows to deploy a backdoor, GRAYRABBIT, on victims’ machines. The attack began with a crafted link issued via email or chat that instructed Sogou’s settings program to…
Thu 10 Sep· 7 articles
-
CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four flaws from Cisco, Google Chromium V8, Fortinet and Citrix NetScaler to its Known Exploited Vulnerabilities (KEV) catalog. The entries are CVE-2025-25249 (Fortinet multiple…
-
Android Update Fixes Critical Wi-Fi Flaw Amid Rising Attack Risks
ThreatsDay’s current bulletin aggregates a broad spectrum of security incidents and research highlights from the week, underscoring a common thread: the path of least resistance is often a familiar, trusted vector. The piece flags multiple notable cases,…
-
Google Chromium V82 articles this day · Security Affairs first
Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived · Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
-
Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived
Security researchers have traced a Chrome-focused zero-day chain used by two Chinese espionage cohorts, UTA0560 and JungleBamboo (APT31), to target NGOs and public policy institutes across borders. The attackers carried out spear-phishing campaigns…
-
Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
Proofpoint, with corroboration from Google Threat Intelligence, MSTIC and Volexity, identifies four espionage groups adopting a Chrome-and-Windows exploit kit named BlueMoon within roughly two weeks of its first appearance. The initial cluster, TA412 (aka…
-
-
Google Chrome2 articles this day · CISA first
Chrome Patches 230 Flaws as Hackers Exploit V8 Bug · CISA Warns of Actively Exploited Chromium Flaw Enabling Code Execution
-
Chrome Patches 230 Flaws as Hackers Exploit V8 Bug
Chrome has begun rolling out a security update for its desktop browser, addressing 230 fixes, including one that is known to be actively exploited. The stable channel is updated to 153.0.8010.36/37 for Windows and macOS, and 153.0.8010.36 for Linux. Users…
-
CISA Warns of Actively Exploited Chromium Flaw Enabling Code Execution
CISA has added CVE-2026-87491 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Google Chromium V8 and is an out-of-bounds write flaw that can allow remote code execution inside the browser sandbox through a crafted HTML page.…
-
-
Android 17 Exploit Chain Gives Untrusted Apps Kernel Control
Researchers have disclosed the LSPromise exploit chain, which they say can take an untrusted local Android app through to full kernel control. The chain affects the initial official release of Android 17 and was successfully tested on a Pixel 10; it did not…
Wed 9 Sep· 9 articles
-
Google Chromium V83 articles this day · SecurityOnline first
BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws · Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
-
BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws
Proofpoint reports that a chrome-and-windows exploit kit, dubbed BlueMoon, has been deployed rapidly by at least four groups after chaining three vulnerabilities to install malware of choice. The chain exploits two Chromium vulnerabilities in the V8 engine…
-
Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
Four espionage-linked clusters are openly deploying a previously undocumented Chrome/Windows exploit chain, dubbed BlueMoon, within days of each other. The first attribution goes to APT31 (China-aligned) on 28 August 2026, with subsequent activity from other…
-
Chinese-Linked Spies Exploit Chrome and Windows Zero-Days
Proofpoint threat researchers have tracked a new BlueMoon exploit kit used in espionage campaigns, chaining Chrome/Chromium browser flaws with a Windows kernel privilege escalation to breach targeted networks. The operation, active from late August into…
-
-
Google Patches 180 Android Flaws, Including Critical Wi-Fi RCE
Google’s September 2026 Android security updates patch a total of 180 vulnerabilities across multiple components, with the rollout split into two patch levels. The first part, 2026-09-01, addresses 95 defects across Android runtime, Framework, System, Setup…
-
Google Chrome4 articles this day · SecurityOnline first
Google Patches Chrome’s Seventh Zero Day of 2026 Under Attack · Google Fixes Exploited Chrome Zero Day Among 230 Flaws in Version 153
-
Google Patches Chrome’s Seventh Zero Day of 2026 Under Attack
Google has released a Chrome update to address a string of actively exploited vulnerabilities in 2026, including the seventh zero-day cased in the wild. The standout flaw is CVE-2026-87491, an out-of-bounds write in the V8 engine with a CVSS score of 8.8,…
-
Google Fixes Exploited Chrome Zero Day Among 230 Flaws in Version 153
Google released Chrome 153 to the stable channel on 9 September 2026, delivering fixes for 230 vulnerabilities and notably addressing a zero-day that is already being exploited in the wild. The CVE tracked as CVE-2026-87491 is described as an out-of-bounds…
-
Chrome Patches Exploited V8 Zero Day Allowing Code Execution
Google Chrome has patched a zero‑day vulnerability in its V8 JavaScript and WebAssembly engine that has been exploited in the wild. The flaw, CVE-2026-87491, is described as an out-of-bounds write in V8 that could let a remote attacker run arbitrary code…
-
Chrome 153 Patches Exploited V8 Zero Day and 229 Flaws
Google has released Chrome 153 to address 230 security flaws, including a zero-day vulnerability in the V8 JavaScript engine that is already being exploited in the wild. The flaw, CVE-2026-87491, is described as an out-of-bounds write in V8 that could allow…
-
-
Google Fixes Critical Android Flaws Enabling Remote Code Execution
Google’s September 2026 Android security bulletin fixes a set of critical flaws across System, Framework and Kernel components, addressing remote code execution and privilege escalation risks. The bulletin confirms five CVEs in total, with one…
Mon 7 Sep· 2 articles
-
Google Patches Chrome V8 Zero Day Exploited in Active Attacks
Google has issued security updates for Chrome after confirming active exploitation of a V8 type-confusion bug tracked as CVE-2026-85046, patched in the latest stable release. The fix is part of a broader set of patches addressing multiple Chrome zero-days…