Update Chrome now: Zero-day bug allows code execution via malicious webpages

Google has issued a patch for a high‑severity Chrome zero‑day, tracked as CVE‑2026‑2441, a memory bug in how the browser handles certain font features that attackers are already exploiting. CVE-2026-2441 has the questionable honor of being the first Chrome zero-day of 2026. Google considered it...

Collaborative Zone-Adaptive Zero-Day Intrusion Detection for IoBT

The Internet of Battlefield Things IoBT relies on heterogeneous, bandwidth-constrained, and intermittently connected tactical networks that face rapidly evolving cyber threats. In this setting, intrusion detection cannot depend on continuous central collection of raw traffic due to disrupted link...

A week in security (February 9 – February 15)

Last week on Malwarebytes Labs: How to find and remove credential-stealing Chrome extensions Fake shops target Winter Olympics 2026 fans Outlook add-in goes rogue and steals 4,000 credentials and payment data Child exploitation, grooming, and social media addiction claims put Meta on trial Apple...

New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released

Google on Friday released security updates for its Chrome browser to address a security flaw that it said has been exploited in the wild. The high-severity vulnerability, tracked as CVE-2026-2441 CVSS score: 8.8, has been described as a use-after-free bug in CSS. Security researcher Shaheen Fazim...

PT-2026-8383

Apple recently patched the missing piece in the userland part of the Dec'25 full-chain exploit. CVE-2026-20700: dyld memory corruption to PAC bypass This bug completes the chain of CVE-2026-43529 jsc UAF RCE, PoC public and CVE-2026-14174 Angle OOB EoP, no working PoC yet. Patched in iOS 26.3...

Update your browser: Security fix for Chrome zero-day CVE-2026-2441

News, Security Update your browser: Security fix for Chrome zero-day CVE-2026-2441 Share February 16th, 2026 Hi everyone! The latest patches to Opera, Opera GX, Opera Air, Opera Neon, and Opera for Android address several recent vulnerabilities, including a zero-day exploit CVE-2026-2441. We...

CVE-2026-2033

creationtimestamp| type| source ---|---|--- 2026-02-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-105/ 2026-02-21 00:02:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd2ldott2h 2026-07-13 19:49:46+00:00| seen|...

CVE-2026-2034

creationtimestamp| type| source ---|---|--- 2026-02-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-104/ 2026-02-21 00:03:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd3nptwd2h 2026-02-26 03:00:15+00:00| seen|...

Apple patches zero-day flaw that could let attackers take control of devices

Apple has released security updates for iPhones, iPads, Macs, Apple Watches, Apple TVs, and Safari, fixing, in particular, a zero-day flaw that is actively exploited in targeted attacks. Exploiting this zero-day flaw would allow cybercriminals to run any code they want on the affected device,...

Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Other Devices

Apple on Wednesday released iOS, iPadOS, macOS Tahoe, tvOS, watchOS, and visionOS updates to address a zero-day flaw that it said has been exploited in sophisticated cyber attacks. The vulnerability, tracked as CVE-2026-20700 CVSS score: 7.8, has been described as a memory corruption issue in dyl...

CVE-2025-13845

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-094/ 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-093/ 2026-02-12 05:00:00+00:00| seen|...

CVE-2026-2038

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-075/ 2026-02-24 22:02:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn67fmhw32d 2026-02-24 23:00:16+00:00| seen|...

CVE-2026-2039

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-077/ 2026-02-24 22:02:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn67mrth52k 2026-02-25 09:40:09+00:00| seen|...

CVE-2026-2037

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-074/ 2026-02-21 00:03:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd44aagu2k 2026-02-25 08:00:16+00:00| seen|...

CVE-2026-2036

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-076/ 2026-02-21 00:03:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd3vbmat2h 2026-02-25 00:00:15+00:00| seen|...

CVE-2026-2041

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-073/ 2026-02-24 14:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmdbbgi7c2x 2026-02-24 18:13:56+00:00| seen|...

CVE-2026-2042

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-071/ 2026-02-24 15:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmitwwjlu2m 2026-02-24 18:14:03+00:00| seen|...

CVE-2026-2043

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-072/ 2026-02-24 14:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmeev27st2w 2026-02-24 18:14:10+00:00| seen|...

Exploit for Protection Mechanism Failure in Microsoft

CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnera...

February 2026 Patch Tuesday includes six actively exploited zero-days

Microsoft releases important security updates on the second Tuesday of every month, known as “Patch Tuesday.” This month’s update patches fix 59 Microsoft CVE’s including six zero-days. Let’s have a quick look at these six actively exploited zero-days. Windows Shell Security Feature Bypass...