VulnerabilitiesBrief2 min read
Google promoted Chrome 156 to the stable channel with patches for 353 vulnerabilities, including six rated critical, and said none were known to be exploited in the wild.
VulnerabilitiesBrief2 min read
A researcher says attackers chained four Plex Media Server flaws, called Plex2Shell, to deploy miners and reverse proxy software a day after a proof-of-concept went public.
VulnerabilitiesBrief1 min read
Trend Micro's Zero Day Initiative rated both KSMBD remote code execution flaws 9.0. One can be triggered before any network authentication, and no mainline kernel fix was available at disclosure.
VulnerabilitiesExploitedCVE-2026-111497CVSS 9.22 min read
Researchers say crafted Brotli data made an official Node.js 24.22.0 Linux arm64 image run attacker-supplied code, exploiting a buffer overflow in the bundled decoder.
