1+ day, 12+ hour ago   (364+ words) A 32-bit WebAssembly heap put the browser playground near a 4 GB ceiling. With weights and AdamW state, that limited the fp32 model size to roughly 250 million parameters. Compiling the same C++ source with Memory64 and BigInt support changed the pointer width. One…...

2+ day, 8+ hour ago   (355+ words) Published on September 11, 2026 BlueMoon exploit kit chains Windows and Chrome zero-days in targeted attacks, giving cyber-espionage groups a way to execute code, escape Chrome’s sandbox, and gain elevated Windows privileges. Proofpoint observed attacks involving BlueMoon starting on August 28, 2026, while Volexity…...

2+ day, 16+ hour ago   (642+ words) A new exploit kit is revealing the perils of the “patch later” mentality. According to the Proofpoint Threat Research team, espionage-motivated threat actors are using a new malicious toolkit to chain together four separate Chrome browser and Microsoft Windows vulnerabilities…...

3+ day, 6+ hour ago   (400+ words) Chrome is rolling out an update for its desktop browser. The update includes 230 security fixes, one of which is known to be actively exploited. The stable channel has been updated to 153.0.8010.36/.37 for Windows and Mac, and 153.0.8010.36 for Linux. If you…...

3+ day, 6+ hour ago   (460+ words) Multiple state-aligned hacking groups have adopted a new exploit kit that can compromise Google Chrome users even when they run the latest stable browser version available at the time of the attack. The campaign, independently documented by Proofpoint and Volexity,…...

3+ day, 15+ hour ago   (1226+ words) The vulnerability was fixed in Chrome 153.0.8010.36/.37 for Windows and macOS and 153.0.8010.36 for Linux as part of the September 8, 2026 Stable Channel release. Google confirmed that an exploit already exists in the wild but has not disclosed who is using it, which…...

3+ day, 9+ hour ago   (292+ words) Google promoted Chrome 153 to the stable channel on Tuesday. The release includes 230 security fixes, and Google rates five of them critical. One line further down the page matters more than any severity rating. "Google is aware that an exploit for…...

3+ day, 15+ hour ago   (196+ words) Google patched CVE-2026-87491, a V8 engine flaw already being exploited in the wild, just two days after a Seoul National University researcher reported it. It's the seventh actively exploited Chrome zero-day of 2026, and four of the seven trace back to the…...

3+ day, 18+ hour ago   (670+ words) The browser’s familiar release rhythm is about to change, with organizations receiving a separate path for managing larger feature updates. Google is shortening Chrome’s update cycle from four weeks to two. The new schedule will apply to computers and Android…...

4+ day, 16+ min ago   (897+ words) Adobe patched the actively exploited CVE-2026-75650 Magento zero-day, but compromised stores still need malware hunting and broad credential rotation. Adobe has patched CVE-2026-75650, a critical Adobe Commerce and Magento Open Source vulnerability that attackers were exploiting before a fix was…...