GOOGLE FIXED THE FIFTH CHROME ZERO
60
60
Update Chrome Now: Google Releases Patch for Actively Exploited Zero
60
60
60
GOOGLE FIXED THE FOURTH CHROME ZERO
60
60
60
60
Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices
Apple's coordinated rollout patches 273 unique vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS and Safari, including remote code execution flaws.
Apple shipped one of its largest coordinated security updates on September 14, 2026, fixing 273 unique CVEs across iOS 27, iPadOS 27, macOS Golden Gate 27, watchOS 27, tvOS 27, visionOS 27, Safari 27 and Xcode 27. Highlights include CVE-2026-65414, a Bluetooth out-of-bounds write enabling remote code execution, and CVE-2026-84607, an AVEVideoEncoder race condition granting kernel privileges to sandboxed apps. macOS Golden Gate 27 covers the broadest set with 210 CVEs, and Apple states none of the flaws were exploited in the wild.
62
Code review used to be the only way to catch these bugs
Palo Alto Networks' Unit 42 says its NOVA system found 14,090 vulnerabilities in 3,915 open-source projects, mostly non-crashing bugs like access control flaws.
Unit 42's NOVA system analyzed 3,915 open-source projects over two months and reported 14,090 validated vulnerabilities, only 85 of which matched previously documented findings. 92% of findings fell outside fuzzing-friendly categories, clustering instead in access control, path traversal, injection, prototype pollution, and SSRF; language ecosystems showed distinct weakness profiles. Of 5,421 supply-chain findings, 1,280 were flaws in dependencies while 4,141 were downstream exposures, 2,776 validated with working proof-of-concepts. Unit 42 warned that faster discovery combined with an average 55-day patch deployment window has collapsed the patch-to-exploit gap.
60
60
60
60
60
60
60
Feds take notice of iOS vulnerabilities exploited under mysterious circumstances
60
U.S. CISA adds Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities catalog
60
Google Confirms CVE-2026-21385 in Qualcomm Android Component Exploited
60
Android devices hit by exploited Qualcomm flaw CVE-2026
60
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office Zero
60
60
60
60
60
CVE-2025-6554 marks the fifth actively exploited Chrome Zero
60
60
60
60
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero
60
Microsoft Patch Tuesday security updates for March 2025 fix six actively exploited zero
60
60
60
60
Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)
60
Adobe Patch Tuesday fixed critical vulnerabilities in Magento, Acrobat and Reader
60
60
Apple fixes four zero-days under attack
60
60