Critical ArangoDB flaws let attackers bypass authentication, access data, and gain root-level code execution on vulnerable hosts.

Chrome zero-day CVE-2026-87491 is under active attack. See what the V8 flaw can do, why the sandbox matters, and which Chrome ...

PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

Google has patched an actively exploited Chrome V8 zero-day that lets attackers run code inside the sandbox via a crafted web page.

Google has pushed out another urgent update for its Chrome browser with all users urged to restart their browsers.

CISA has added a critical Google Chromium V8 type confusion vulnerability, tracked as CVE-2026-85046, to its Known Exploited ...

A flaw in Telegram Desktop allowed specially crafted bot messages to execute JavaScript in HTML chat exports and expose ...

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in ...

Okta has released security updates for three high-severity vulnerabilities affecting the Auth0 AD/LDAP Connector and Okta ...

The vulnpocalypse is upon us, dear reader. Microsoft delivered a record number of patches to address 974 CVEs in its own products this month, including two bugs that Redmond says are already under ...

BlueMoon chains Chrome and Windows zero-days to escape the browser sandbox, elevate privileges, and deliver malware on ...

LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor.