Working Exploit Out for Windows Error Reporting Flaw CVE-2026-97798
November 9, 2026
A researcher released a working exploit for CVE-2026-97798, a Windows Error Reporting flaw that gives SYSTEM from a standard account,
Endpoint Security
Working Exploit Out for Windows Error Reporting Flaw CVE-2026-97798
A researcher released a working exploit for CVE-2026-97798, a Windows Error Reporting flaw that gives SYSTEM from a standard account, patched in October.
Fake GitHub Security Tools Infect 2,000+ PCs, Doctor Web Reports
Doctor Web says trojanized GitHub projects posing as security tools have infected more than 2,000 PCs, using an Electron-based loader that disables Defender.
GhostMap Android Bug Traps Phones in Boot Loop; Google Won’t Fix
Bitdefender disclosed GhostMap, an Android 10+ flaw that lets a permissionless app trap phones in an endless crash loop; Google has declined to issue a ...
NIKKE PC Launcher Scripts Tampered to Spread K2F Malware
Attackers tampered with Goddess of Victory: NIKKE PC launcher scripts on an official CDN to install the K2F remote-access agent and a wallet-stealing DLL.
Chrome 157 Fixes 213 Security Flaws, Seven Rated Critical
Google's Chrome 157 stable release patches 213 security flaws, including seven critical memory bugs, with 12 found by Anthropic researchers assisted by Claude.
German Officials Among Recipients of Apple Spyware Warnings
Apple sent mercenary-spyware warnings to German officials, lawmakers and journalists, and the BSI told recipients to assume their devices are infected.
Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says built the backdoor into firmware.
cPGuard Update Channel Hijacked to Push Linux Server Backdoor
An attacker used stolen credentials to push a malicious script through OPSSHIELD's cPGuard update channel, installing a backdoor and stealing root SSH keys.
Android November Bulletin Fixes 216 Flaws, Three Zero-Click RCEs
Google's November Android bulletin patches 216 vulnerabilities, including CVE-2026-58868 and two more zero-click critical RCE bugs; no exploitation reported.
Public Exploit Lets One SMS Crash Android Phones, Drop 911 Calls
A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android's phone process and loop devices; Android 12 and 13 lack a ...
Fake GitHub Security Tools Infect 2,000+ PCs, Doctor Web Reports
November 9, 2026
Doctor Web says trojanized GitHub projects posing as security tools have infected more than 2,000 PCs, using an Electron-based loader
GhostMap Android Bug Traps Phones in Boot Loop; Google Won’t Fix
November 6, 2026
Bitdefender disclosed GhostMap, an Android 10+ flaw that lets a permissionless app trap phones in an endless crash loop; Google
NIKKE PC Launcher Scripts Tampered to Spread K2F Malware
November 5, 2026
Attackers tampered with Goddess of Victory: NIKKE PC launcher scripts on an official CDN to install the K2F remote-access agent
Chrome 157 Fixes 213 Security Flaws, Seven Rated Critical
November 4, 2026
Google’s Chrome 157 stable release patches 213 security flaws, including seven critical memory bugs, with 12 found by Anthropic researchers
German Officials Among Recipients of Apple Spyware Warnings
November 4, 2026
Apple sent mercenary-spyware warnings to German officials, lawmakers and journalists, and the BSI told recipients to assume their devices are
Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
November 3, 2026
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says
cPGuard Update Channel Hijacked to Push Linux Server Backdoor
November 3, 2026
An attacker used stolen credentials to push a malicious script through OPSSHIELD’s cPGuard update channel, installing a backdoor and stealing
Android November Bulletin Fixes 216 Flaws, Three Zero-Click RCEs
November 3, 2026
Google’s November Android bulletin patches 216 vulnerabilities, including CVE-2026-58868 and two more zero-click critical RCE bugs; no exploitation reported.
Public Exploit Lets One SMS Crash Android Phones, Drop 911 Calls
November 2, 2026
A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android’s phone process and loop devices; Android
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.