Google patches the sixth Chrome zero-day of 2026 after attackers start exploiting a V8 type confusion bug.
Researcher Chaotic Eclipse published HardBreacher, a working exploit for a Kaspersky Endpoint Security privilege escalation zero-day.
A critical Cosmos EVM balance flaw let attackers drain six blockchains before the patch shipped.
Researchers released a Certighost exploit for a critical AD CS flaw that lets authenticated users escalate privileges to full domain…
Publicly released exploit code for the WordPress core wp2shell vulnerability is fueling widespread mass scanning and site takeover attempts.
Microsoft contains a zero-day vulnerability tracked as RoguePlanet that was actively exploited in enterprise environments, with CISA adding it to…
The IonStack exploit chain uses a Firefox zero day and a 15 year old Linux kernel flaw to achieve full…
Attackers are exploiting a Citrix NetScaler memory disclosure flaw to steal active session tokens and deploy ransomware in under an…