Chrome 156 Update Fixes 52 Flaws Including Sandbox Escape
October 28, 2026
Google’s Chrome 156.0.8078.73 update fixes 52 flaws, four critical, including CVE-2026-118306, a FileSystem bug that allows code execution outside the
Endpoint Security
Chrome 156 Update Fixes 52 Flaws Including Sandbox Escape
Google's Chrome 156.0.8078.73 update fixes 52 flaws, four critical, including CVE-2026-118306, a FileSystem bug that allows code execution outside the sandbox.
Fake Claude Download Pages on claude.ai Spread Mac Stealer
Gen Digital found fake Claude install guides hosted on the real claude.ai domain, promoted by Google Ads, delivering Atomic macOS Stealer and a Windows RAT.
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the flaw to its KEV catalog.
Public PoC Released for macOS autofs Root and Gatekeeper Flaws
A researcher published a PoC for macOS autofs flaws CVE-2026-84568 (root) and CVE-2026-84570 (Gatekeeper bypass), which Apple already patched in September.
Onamae Desktop Cloud Hacked; Malware on Up to 26,739 Servers
GMO Internet Group says an intruder planted malicious programs on up to 26,739 Onamae.com Desktop Cloud servers in Japan and has shut the service down.
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
An attacker used a hijacked contributor GitHub account to swap secret-stealing builds into five OVHcloud CLI releases for about 94 minutes before detection.
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
Calif published a working OpenBSD 7.9 root exploit chaining a 37-year-old integer overflow with a kernel flaw; syspatch errata 018 and 026 fix both bugs.
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
Citizen Lab confirmed NSO Group's Pegasus spyware on the phone of Belgrade university rector Vladan Djokic days before Serbia's October 25 elections.
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
Researcher Hyunwoo Kim released working exploits for six Linux kernel bugs called Infinity Core, five of which give local root or container escape.
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
A counterfeit Chrome app from developer Hizbartech reached 100,000 downloads on Google Play and reportedly appeared as a sponsored result above real Chrome.
Fake Claude Download Pages on claude.ai Spread Mac Stealer
October 28, 2026
Gen Digital found fake Claude install guides hosted on the real claude.ai domain, promoted by Google Ads, delivering Atomic macOS
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
October 27, 2026
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the
Public PoC Released for macOS autofs Root and Gatekeeper Flaws
October 27, 2026
A researcher published a PoC for macOS autofs flaws CVE-2026-84568 (root) and CVE-2026-84570 (Gatekeeper bypass), which Apple already patched in
Onamae Desktop Cloud Hacked; Malware on Up to 26,739 Servers
October 23, 2026
GMO Internet Group says an intruder planted malicious programs on up to 26,739 Onamae.com Desktop Cloud servers in Japan and
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
October 21, 2026
An attacker used a hijacked contributor GitHub account to swap secret-stealing builds into five OVHcloud CLI releases for about 94
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
October 21, 2026
Calif published a working OpenBSD 7.9 root exploit chaining a 37-year-old integer overflow with a kernel flaw; syspatch errata 018
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
October 20, 2026
Citizen Lab confirmed NSO Group’s Pegasus spyware on the phone of Belgrade university rector Vladan Djokic days before Serbia’s October
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
October 19, 2026
Researcher Hyunwoo Kim released working exploits for six Linux kernel bugs called Infinity Core, five of which give local root
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
October 16, 2026
A counterfeit Chrome app from developer Hizbartech reached 100,000 downloads on Google Play and reportedly appeared as a sponsored result
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.