1+ day, 21+ hour ago   (355+ words) Published on September 11, 2026 BlueMoon exploit kit chains Windows and Chrome zero-days in targeted attacks, giving cyber-espionage groups a way to execute code, escape Chrome’s sandbox, and gain elevated Windows privileges. Proofpoint observed attacks involving BlueMoon starting on August 28, 2026, while Volexity…...

3+ day, 19+ hour ago   (321+ words) Published on September 9, 2026 Google has fixed 230 Chrome vulnerabilities with the release of Chrome 153, including a zero-day that attackers are already exploiting in the wild. The flaw, tracked as CVE-2026-87491, affects Chrome’s V8 engine and marks the seventh actively exploited Chrome zero-day…...

4+ day, 10+ hour ago   (331+ words) Published on September 8, 2026 Microsoft’s September 2026 Patch Tuesday fixes a record 966 security vulnerabilities, including two zero-days that attackers are actively exploiting. Microsoft has released Patch Tuesday updates for Windows 11 alongside Windows 10 KB5122878, delivering what appears to be the company’s largest Patch Tuesday…...

1+ week, 4+ day ago   (260+ words) Published on September 1, 2026 Nearly 22,000 Microsoft Exchange servers remain vulnerable to a high-severity authentication bypass flaw that could give attackers access to every user mailbox on affected systems. Shadowserver identified 21,899 vulnerable Exchange server IP addresses exposed to the internet. Around 6,200 are…...

3+ week, 6+ day ago   (201+ words) Published on August 16, 2026 Microsoft has released a new Microsoft Defender update package for Windows installation images, refreshing the security protection included with Windows setup media following the August 2026 Patch Tuesday updates. The package targets WIM, VHD, and ISO installation images…...