Cybersecurity Flash Notices

Google Fixes 52 Chrome Security Flaws, Including 4 Critical Memory-Corruption Bugs

Google released Chrome 156 stable channel builds 156.0.8078.73/.74 & 156.0.8078.73, fixing 52 vulnerabilities: 4 Critical, 46 High and 2 Medium severity.

PHP2Shell: Critical PHP RCE Flaws Leaked Before Emergency Patch, With Early Exploitation Attempts

The PHP security team published a notice on October 20, 2026 announcing an emergency release for two critical vulnerabilities.

Palo Alto Networks GlobalProtect Authentication Bypass — Ransomware Groups Actively Exploiting

CVE-2026-0257 is an auth bypass vulnerability in Palo Alto Networks GlobalProtect portal and gateway affecting PAN-OS & Prisma Access deployments.

Warlock Ransomware Campaign — China-Linked Group Targets Water, Telecom & Government via SharePoint

The China-linked ransomware group Warlock is conducting an active campaign targeting critical infrastructure orgs across Spanish & Portuguese-speaking countries.

Apple CoreGraphics Zero-Day Remote Code Execution — Active Exploitation

Apple has released emergency security updates for iOS and iPadOS addressing CVE-2026-86950, a critical zero-day vulnerability in CoreGraphics.

Windows Defender Zero-Day Can Block Microsoft Antivirus Updates

A researcher has released a Windows Defender zero-day exploit that can prevent Microsoft Defender Antivirus from receiving signature and platform updates.

LG Smart TVs Discovered Recording Audio in Standby & Scanning Networks

A comprehensive investigation published by Gamers Nexus has documented covert data collection and network surveillance activities in LG OLED televisions.

Google Chrome 152 Released With 327 Security Fixes – 10 Critical Vulnerabilities

Google has released Chrome 152 with 327 security fixes, including 10 critical vulnerabilities affecting multiple browser components.

SynkLoader: New Malware Family Impersonates IT Support on Microsoft Teams for Credential Theft

Researchers identified a new multi-stage malware called SynkLoader being actively distributed in phishing campaigns targeting orgs via Microsoft Teams.

Microsoft Teams Impersonation and Chaos Ransomware Campaign

Avertium is tracking a ransomware campaign leveraging Microsoft Teams-based vishing, social engineering, and IT support impersonation to gain initial access to target environments.

Prev 1 2 3 Next