Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
openSUSE: 2019:2421-1: important: chromium
An update that fixes two vulnerabilities is now available.
openSUSE: 2019:2420-1: important: chromium, re2
An update that fixes 21 vulnerabilities is now available.
openSUSE: 2019:2314-1: important: chromium
An update that fixes 5 vulnerabilities is now available.
openSUSE: 2019:2313-1: important: chromium
An update that fixes 5 vulnerabilities is now available.
openSUSE: 2019:2311-1: important: chromium
An update that fixes 5 vulnerabilities is now available.
openSUSE: 2019:2312-1: important: chromium
An update that fixes 5 vulnerabilities is now available.
Google launches leaked-password checker, will bake it into Chrome in December
Google plans to add a hacked-password alert system into its browser by the end of year; Firefox aims to do much the same thing this month. Learn more in an inf…
openSUSE: 2019:2228-1: important: chromium
An update that fixes four vulnerabilities is now available.
openSUSE: 2019:2229-1: important: chromium
An update that fixes four vulnerabilities is now available.
openSUSE: 2019:2186-1: important: chromium
An update that fixes four vulnerabilities is now available.
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial …
Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial …
Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all a…
Chaos Ransomware’s msaRAT Hides Its C2 Inside Your Own Browser
Cisco Talos has detailed msaRAT, a Rust-based RAT used by the Chaos ransomware crew that drives a headless Chrome or Edge session over CDP to smuggle C2 traffi…
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, wh…
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages and web browser extensions spannin…
UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign
The Computer Emergencies Response Team of Ukraine (CERT-UA) has disclosed details of a new campaign that has targeted governments and municipal healthcare inst…
Fedora 42 CEF High Security Vulnerabilities Heap Overflow Out Of Bounds
Update to cef-146.0.9+g3ca6a87 + chromium 146.0.7680.164 High CVE-2026-4673: Heap buffer overflow in WebAudio High CVE-2026-4674: Out of bounds read in CSS Hig…
GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data
Cybersecurity researchers have flagged a new evolution of the GlassWorm campaign that delivers a multi-stage framework capable of comprehensive data theft and …
Ubuntu 23 Core Security Key Data Buffer Overflow Flaws Detected 2037
Bump to cef-145.0.28+g51162e8 + chromium 145.0.7632.159 (rhbz#2437035) CVE-2026-3536: Integer overflow in ANGLE CVE-2026-3537: Object lifecycle issue in PowerV…
Fedora 43 CEF Warning Concerning Serious Integer Overflow Vulnerabilities
Bump to cef-145.0.28+g51162e8 + chromium 145.0.7632.159 (rhbz#2437035) CVE-2026-3536: Integer overflow in ANGLE CVE-2026-3537: Object lifecycle issue in PowerV…
Fedora 44 cef Update Fixes Integer Overflow and Object Lifecycle Concerns
Bump to cef-145.0.28+g51162e8 + chromium 145.0.7632.159 (rhbz#2437035) CVE-2026-3536: Integer overflow in ANGLE CVE-2026-3537: Object lifecycle issue in PowerV…
Fedora 42 CEF Critical Update Heap Overflow DoS 2026-a48b5f36ec
Update to cef-145.0.25 + chromium 145.0.7632.75 CVE-2026-1861: Heap buffer overflow in libvpx CVE-2026-1862: Type Confusion in V8 CVE-2026-2313: Use after free…
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, cit…