60
60
60
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update
60
60
60
Microsoft plugs actively exploited zero-day hole (CVE-2023-21674)
60
60
60
45
60
60
Google fixed another Chrome zero
60
60
60
60
60
Microsoft Patches 5 Zero-Day Vulnerabilities Being Exploited in the Wild
60
60
60
60
60
Week in review: Windows zero-day exploited, Patch Tuesday forecast, selecting a compliance solution
60
One Click on a Malicious Link Lets Hackers Backdoor Sogou Input Method Users
Actively exploited one-click flaw in Sogou Input Method (CVE-2026-51990) let UNC3569 deploy the GRAYRABBIT espionage backdoor on Windows.
Gen Digital researchers found three weaknesses in Sogou Input Method's sgbiz protocol handler that chain into a one-click RCE running with the signed-in user's permissions. UNC3569 used the chain in an active intrusion, leveraging an unsandboxed Chromium 80 embedded browser, the known V8 flaw CVE-2021-38003, and DLL sideloading via 7-Zip to deploy the GRAYRABBIT backdoor. Tencent fixed the issue in version 16.3.0.3498 within 12 days of disclosure; Sogou is used by hundreds of millions of people, mainly in China.
78
Google fixes two actively exploited Chrome zero-days (CVE-2020-16009, CVE-2020-16010)
60
U.S. CISA adds Microsoft Office and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog
60
60
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
Attackers BGP-hijacked Softaculous IP space via Hetzner routing lapses to push malicious Virtualizor updates to hosting servers.
Unknown attackers hijacked the 162.55.80.0/24 prefix used by Softaculous' Virtualizor update service by abusing lax routing security at hosting provider Hetzner Online, announcing the range through AS6204, AS62390, and AS24940 with a forged but RPKI-valid origin. The hijack pulsed intermittently over roughly 33 hours, delivering modified update packages to Virtualizor servers, which lacked cryptographic code signing for updates. Softaculous says only a small number of servers were likely affected but cannot produce a definitive list, urging administrators to treat every Virtualizor server as in scope for checks.
65
60
60
60
60
Microsoft Fixes Windows Defender Zero
60
Google fixed second actively exploited Chrome zero
60
60
60
60
60
Adobe addressed critical bugs in Illustrator, After Effects Software
60
60