VulnerabilityMalwarebytes Labs·1 hour ago
Two critical Chrome flaws put users at risk on malicious websites
Update Chrome now: Two critical vulnerabilities could allow a malicious website to run code on your device.
← Back
VulnerabilitySecurityWeek·3 hours ago
Chrome and Firefox Updates Patch Dozens of Vulnerabilities
Chrome and Firefox have released updates addressing multiple vulnerability categories including use-after-free bugs, sandbox escape flaws, and privilege escalation issues. Security professionals should prioritize deploying these browser updates to mitigate the patched attack vectors.
Read full article at SecurityWeek ↗Related Articles
VulnerabilityThe Hacker News·1 hour ago
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
SonicWall has patched two zero-day vulnerabilities affecting its SMA 1000 VPN appliances that are being actively exploited in the wild. The flaws, including a critical pre-authentication SSRF vulnerability with a CVSS score of 10.0, may be chained together by attackers to compromise affected systems. Security updates are now available to address these issues discovered during SonicWall's internal security review.
VulnerabilitySecurityWeek·1 hour ago
OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold
The designation applies when a model can independently find and exploit zero-day vulnerabilities across many well-defended systems. The post OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold appeared first on SecurityWeek.
VulnerabilityThe Hacker News·3 hours ago
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Two vulnerabilities in GeoNetwork can be chained together to achieve unauthenticated remote code execution against the open-source geospatial metadata catalog commonly deployed behind government and agency geoportals. The project released fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, with vulnerability details publicly disclosed on August 31.