What happened: An independent researcher publicly disclosed 33 critical vulnerabilities in N-able’s N-central RMM platform, including unauthenticated remote…
Update Chrome now to fix a flaw attackers are exploiting
What happened: Google shipped an emergency security update for Chrome on November 9 that patches nine vulnerabilities, including a zero-day flaw (CVE-2026-12…
Google fixes the eighth actively exploited Chrome zero-day of 2026
What happened: Google patched nine Chrome security flaws, including a use-after-free vulnerability in XML tracked as CVE-2026-125350, which is being actively…
Hackers now exploit critical Barracuda ESG flaws to gain root access
What happened: Attackers have begun exploiting two recently patched Barracuda Email Security Gateway vulnerabilities that, when combined, allow them to bypas…
Google patches eighth Chrome zero-day exploited in attacks this year
What happened: Google shipped emergency Chrome security updates to fix CVE-2026-125350, a high-severity Use-After-Free vulnerability in the browser’s XML com…
Binance warns of iOS flaw that could leak crypto wallet secrets
What happened: Binance warned that a publicly disclosed iOS sandbox escape technique called “worse_query” allows malicious apps to read other apps’ private f…
Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers
What happened: A critical authentication bypass vulnerability (VSA-2026-062) in Xen Orchestra is being actively exploited to gain admin privileges and take o…
Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
What happened: Microsoft’s November 2026 Patch Tuesday addressed 1,235 vulnerabilities, including an actively exploited Microsoft Outlook zero-day (CVE-2026-…
N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days
What happened: N-able took its hosted N-central environment offline as a precautionary measure after security researcher Sean Bales publicly disclosed more t…