5439 matches found
Update Chrome now: Zero-day bug allows code execution via malicious webpages
Google has issued a patch for a high‑severity Chrome zero‑day, tracked as CVE‑2026‑2441, a memory bug in how the browser handles certain font features that attackers are already exploiting. CVE-2026-2441 has the questionable honor of being the first Chrome zero-day of 2026. Google considered it...
Collaborative Zone-Adaptive Zero-Day Intrusion Detection for IoBT
The Internet of Battlefield Things IoBT relies on heterogeneous, bandwidth-constrained, and intermittently connected tactical networks that face rapidly evolving cyber threats. In this setting, intrusion detection cannot depend on continuous central collection of raw traffic due to disrupted link...
A week in security (February 9 – February 15)
Last week on Malwarebytes Labs: How to find and remove credential-stealing Chrome extensions Fake shops target Winter Olympics 2026 fans Outlook add-in goes rogue and steals 4,000 credentials and payment data Child exploitation, grooming, and social media addiction claims put Meta on trial Apple...
New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released
Google on Friday released security updates for its Chrome browser to address a security flaw that it said has been exploited in the wild. The high-severity vulnerability, tracked as CVE-2026-2441 CVSS score: 8.8, has been described as a use-after-free bug in CSS. Security researcher Shaheen Fazim...
Update your browser: Security fix for Chrome zero-day CVE-2026-2441
News, Security Update your browser: Security fix for Chrome zero-day CVE-2026-2441 Share February 16th, 2026 Hi everyone! The latest patches to Opera, Opera GX, Opera Air, Opera Neon, and Opera for Android address several recent vulnerabilities, including a zero-day exploit CVE-2026-2441. We...
PT-2026-8383
Apple recently patched the missing piece in the userland part of the Dec'25 full-chain exploit. CVE-2026-20700: dyld memory corruption to PAC bypass This bug completes the chain of CVE-2026-43529 jsc UAF RCE, PoC public and CVE-2026-14174 Angle OOB EoP, no working PoC yet. Patched in iOS 26.3...
CVE-2026-2033
creationtimestamp| type| source ---|---|--- 2026-02-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-105/ 2026-02-21 00:02:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd2ldott2h 2026-07-13 19:49:46+00:00| seen|...
CVE-2026-2034
creationtimestamp| type| source ---|---|--- 2026-02-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-104/ 2026-02-21 00:03:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd3nptwd2h 2026-02-26 03:00:15+00:00| seen|...
PT-2026-23031
Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.0 through 10.11.10 Mattermost versions 11.2.0 through 11.2.2 Mattermost versions 11.3.0 Description Mattermost does not consistently handle error responses when processing the /mute command. This allows an authenticat...
Apple patches zero-day flaw that could let attackers take control of devices
Apple has released security updates for iPhones, iPads, Macs, Apple Watches, Apple TVs, and Safari, fixing, in particular, a zero-day flaw that is actively exploited in targeted attacks. Exploiting this zero-day flaw would allow cybercriminals to run any code they want on the affected device,...
Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Other Devices
Apple on Wednesday released iOS, iPadOS, macOS Tahoe, tvOS, watchOS, and visionOS updates to address a zero-day flaw that it said has been exploited in sophisticated cyber attacks. The vulnerability, tracked as CVE-2026-20700 CVSS score: 7.8, has been described as a memory corruption issue in dyl...
CVE-2026-2036
creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-076/ 2026-02-21 00:03:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd3vbmat2h 2026-02-25 00:00:15+00:00| seen|...
CVE-2026-2039
creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-077/ 2026-02-24 22:02:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn67mrth52k 2026-02-25 09:40:09+00:00| seen|...
CVE-2026-2038
creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-075/ 2026-02-24 22:02:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn67fmhw32d 2026-02-24 23:00:16+00:00| seen|...
CVE-2026-2041
creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-073/ 2026-02-24 14:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmdbbgi7c2x 2026-02-24 18:13:56+00:00| seen|...
CVE-2026-2043
creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-072/ 2026-02-24 14:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmeev27st2w 2026-02-24 18:14:10+00:00| seen|...
CVE-2026-2042
creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-071/ 2026-02-24 15:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmitwwjlu2m 2026-02-24 18:14:03+00:00| seen|...
CVE-2025-13845
creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-094/ 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-093/ 2026-02-12 05:00:00+00:00| seen|...
CVE-2026-2037
creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-074/ 2026-02-21 00:03:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd44aagu2k 2026-02-25 08:00:16+00:00| seen|...