Critical vm2 sandbox bug lets attackers execute code on hosts
…The security issue is tracked as CVE-2026-26956 and has been confirmed to impact vm2 version 3.10.4, although earlier releases may also be vulnerable. Proof-of-concept (PoC) exploit…
Search
Related topics:
Google
All sources
bleepingcomputer.com
19
theregister.com
15
androidauthority.com
12
pcworld.com
10
tomshardware.com
8
techradar.com
6
tweaktown.com
6
hothardware.com
5
wired.com
5
engadget.com
4
appleinsider.com
4
9to5mac.com
3
Videos
More videosTop stories
Google fixes one actively exploited Android zero-day, 124 flaws
3d agoMicrosoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation
1w agoAI shrinks zero-day exploit time from a year to a single day, heading toward one minute — Zero-Day Clock warns security window has collapsed
1w agoMillions of Chrome and Edge Users Exposed To Alarming Exploit by Google Security Blunder
1w agoGoogle Detects First AI-Developed Zero-Day Exploit Used by Threat Actors
Google Detects First AI-Developed Zero-Day Exploit Used by Threat Actors by Tim Sweezy — Tuesday, May 12, 2026, 10:58 AM EDT The May 2026 report from Google’s Threat Intelligence…
Google Raises Top Android Bug Bounty to $1.5 Million to Combat AI-Era Threats
…Google's also paying up to $375,000 for secure element data exfiltration flaws, up from $250,000 previously. Google adjusted its top Chrome bounties too, though they shifted in the opposite…
You are out of time to update: Severe iOS hack code leaks to everyone
…quot;This is bad," said Matthias Frielingsdorf, co-founder of the security startup iVerify, adding that "the exploits will work out of the box" as "there is no…
The AI-driven shift in vulnerability discovery: What maintainers and bug finders need to know
…Brandt Keller (CNCF Security TAG, Defense Unicorns), Chris Aniszczyk (CNCF), Evan Anderson (CNCF Security TAG, Custcodian), Ivan Fratric (Project Zero, Google), Jordan Liggitt (Kubernetes, Google), Michael Lieberman, Monis Khan (Kubernetes, Microsoft), Natalie…
Security researcher finds zero-day exploit that defeats Windows 11 BitLocker, calls it an insane 'backdoor' discovery
TweakTown News Hacking, Security & Privacy TL;DR: The YellowKey zero-day exploit lets anyone with physical access bypass Windows 11's default BitLocker encryption via a WinRE vulnerability, granting full drive access…
Security on MacRumors
…Find My Network Exploited to Send Messages An exploit allows messages and additional data to be sent across Apple's Find My network, according to the findings of a security researcher. Security…
Google just patched 150+ Chrome vulnerabilities, 22 of them critical
…According to Google, none of these security vulnerabilities are being exploited in the wild yet. In the Chrome Releases blog post, Srinivas Sista lists the 151 fixed security vulnerabilities in question, with…
Apple releases rare iOS 18 update for all iPhone users, update now - 9to5Mac
…New iOS 18 security update now available As we detailed last month , DarkSword is an exploit chain affecting iOS 18.4 through iOS 18.7 that was discovered by the Google Threat…
Advancing Protection in Chrome on Android
Chrome Security Advancing Protection in Chrome on Android Jul 08, 2025 · David Adrian Chrome Security Team Javier Castro & Peter Kotwicz Chrome Security Team Android recently announced Advanced Protection , which extends Google’s…