Emergency Chrome 146 update patches 2 zero-day vulnerabilities
In the new Chrome versions 146.0.7680.75/76 for Windows and macOS, and 146.0.7680.75 for Linux, the developers have fixed two security vulnerabilities. According to Google, both…
Search
All sources
bleepingcomputer.com
51
pcworld.com
19
arstechnica.com
5
macrumors.com
4
guru3d.com
3
hothardware.com
3
appleinsider.com
3
techcrunch.com
2
theverge.com
2
phoronix.com
2
about.gitlab.com
2
wired.com
2
Videos
More videos
VLOG Thursday 491: Firewall Vulnerabilities & Security, Virtualization & Homelab Q&A
VLOG Thursday 490: UniFi, Vulnerabilities & Security, Virtualization & Homelab Q&A
EP283: How Google Cloud CISO Chris Betz Uses LLMs to Defend Billions of Users from Vulnerabilities
I Built an AI Cybersecurity Research Factory (for CTFs & Vulnerabilities)
MSI Trades Security for RGB
AMD Gaslights Security Researcher, Changes Rules Retroactively
KDE gets €1M, 3 big vulnerabilities for Linux, EU privacy disaster brewing - Linux Weekly News
Reinventing Web Security
AI Is Great at Finding Vulnerabilities. So Where's the Vulnpocalypse?
Security-driven Rapid Release - Pwn2Own Documentary (Part 4)
Network Security Basics - Are you doing these things?
Top stories
CISA orders urgent action on actively exploited Langflow RCE flaw
…government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents. Tracked as CVE-2026-0770 , this critical security flaw allows unauthenticated threat actors to…
Forgotten Microsoft-Signed Bootloaders Let Hackers Bypass Secure Boot For 11 Years
…As ESET notes , "what makes these old shims dangerous is not a novel vulnerability, it's that no new vulnerability is needed to bypass UEFI Secure Boot." Microsoft has revoked trust in…
CISA warns of active attacks exploiting Android, Linux bugs
…The issue has been addressed with the release of June 2026 security patches (2026-06-01 and 2026-06-05 security patch levels). The second vulnerability CISA added to KEV is tracked…
Discussions and forums
China Says It Has Found Security Vulnerabilities in Anthropic's Claude Code
China Says It Has Found Security Vulnerabilities in Anthropic's Claude Code
4
2
Grok 4.5 and GPT5.6 beat Anthropic for finding security vulnerabilities in PRs
Grok 4.5 and GPT5.6 beat Anthropic for finding security vulnerabilities in PRs
10
1
Ask HN: Are other OS maintainers being spammed with Security Vulnerabilities?
I'm being hit with small, nitpick security vulnerabilities, like being able to IDOR profile images for other users on a self-hosted software.Then the submitters are spamming me to release a vulnerability, despite me mess…
3
7
Show HN: I benchmarked LLM agents on fixing real-world security vulnerabilities
I built a benchmark with 20 real CVEs across 18 Python projects (Pillow, GitPython, yt-dlp, urllib3, etc). I've run it over 5 LLM agents (3 OpenAI, 2 poolside) and 3 different prompts (full advisory, locate, diagnose) wi…
4
4
Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates
Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI. https://www.securityweek.com/oracle-patches-over-1400-vulnerabilities-with-quarterly-security-updates/ submitted by…
Critical Progress LoadMaster flaw now actively exploited in attacks
…Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability. Kemp LoadMaster is a very popular Application Delivery Controller (ADC) and server…
Microsoft paid $20 million to security researchers in biggest-ever bug bounty payout
…Microsoft detailed the rewards in a recent blog post . "Security is a team sport. Every vulnerability reported through our bounty programs represents an opportunity to address risk before it can be exploited…
CISA flags two-year-old Oracle flaw as actively exploited in attacks
…Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerability that was patched two years ago and is now actively…
CISA warns admins to patch actively exploited SharePoint flaws
…Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. These security flaws (tracked as CVE-2026-32201…
Microsoft fixes 167 security flaws in April, second biggest Patch Tuesday ever
With April's Patch Tuesday hitting just yesterday, Microsoft released updates to address 167 security vulnerabilities. This is the second highest number of vulnerabilities ever patched on a Patch Tuesday (beat out…
Now in preview: Find and fix software vulnerabilities with CodeMender | Google Cloud Blog
…CodeMender’s harness with security context helps you discover sophisticated vulnerabilities that static and model-only scanning miss. These scans look for hard-to-find vulnerabilities like memory corruption, injection, web security…