Security JournalThreats, systems & the work of defence
Reading index Flaws, patches and software security reporting.
19 articles · Original source datesGoogle has promoted Chrome 157 to the stable channel with patches for 213 vulnerabilities, including seven critical memory safety bugs. At the top of the list is a buffer overflow issue in Dawn, the open…
SecurityWeek · 1 min readGoogle has fixed CVE-2026-58868, a critical Android vulnerability affecting versions 14 through 17. The flaw is a critical Android vulnerability caused by a heap buffer overflow in the onOutputReceived…
Security Affairs · 3 min readThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a WordPress flaw, tracked as CVE-2026-119977 (CVSS score of 8.1), to its Known Exploited Vulnerabilities (KEV) catalog .
Security Affairs · 2 min readMeta has paid roughly $1.2 million in bug bounties for its Muse AI agent, including $300,000 for a pre-launch flaw that exposed data on internal test systems. Muse is a personal AI agent that acts on a user’s…
SecurityWeek · 2 min readGoogle on Monday announced new security updates for Android that resolve more than 200 vulnerabilities, including two dozen critical-severity issues. The first part of the patches arrives on devices as the…
SecurityWeek · 2 min readHackers have started exploiting a critical-severity vulnerability in Node-RED to deploy various payloads, vulnerability intelligence company VulnCheck reports. Node-RED is a low-code, flow-based programming…
SecurityWeek · 2 min readGoogle has expanded its Cloud Vulnerability Reward Program (VRP) with a new $250,000 top-tier reward for security weaknesses that could lead to full administrative control. The premier payout is “specifically…
SecurityWeek · 2 min readIvanti has released patches for two more Connect Secure (ICS) zero-days that attackers chained with a vulnerability the company disclosed last month. The newly patched bugs are CVE-2026-111357 and…
SecurityWeek · 2 min readThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog :
Security Affairs · 3 min readDrupal warns that threat actors are exploiting a highly critical security flaw, tracked as CVE-2026-118539 , in its Commerce Core module. The vulnerability is caused by missing authorization checks.
Security Affairs · 1 min readThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added GitLab and Cisco vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog :
Security Affairs · 2 min readLumen’s Black Lotus Labs has spent three years tracking a covert network it calls Silent Train, which it ties to Volt Typhoon, the China-linked APT group. The cybersecurity firm says the network hid…
Security Affairs · 5 min readNo matches on this page. Change the filter or browse another page.
