Google has released Chrome updates for desktop and Android to patch a zero-day vulnerability already being exploited in attacks.
This page shows only the headline and the short summary. The full text is published by the original source.
Microsoft has disclosed CVE-2026-109469, a critical elevation of privilege vulnerability in Entra Device Registration, the cloud service that registers and joins devices to Microsoft Entra ID. The flaw carries a maximum CVSS score, meaning that an unauthenticated attacker could exploit it over the network with no user interaction. Customers have nothing to patch. Microsoft says […]
Another Chrome memory bug gets squashed, but not before attackers got their hands on it
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its online incident reporting form to help analysts spot when attacks on different organizations may be part of the same campaign. The revised questionnaire asks more specific questions and removes duplicate ones. The form asks whether an incident involved malware, attempts to trick people, hacking techniques, or an insider threat. It also u…
Copied storefronts, fake urgency, and contradictory product claims are among the warning signs we found on suspicious advent calendar sites.
