Just two days earlier, on March 10th, Google released the new major version Chrome 146, which you can read about in this Chrome Releases blog post. That update fixed 29 security vulnerabilities, almost all of which were reported by external security researchers. One of the vulnerabilities (CVE-2026-3913) is classified as critical, a buffer overflow in the WebML component. Tobias Wienand, the discoverer of this vulnerability, was rewarded $33,000 for it. He also got an additional $43,000 for CVE-2026-3915, another WebML buffer overflow (although that one only classified as high risk). Eleven se
Emergency Chrome 146 update patches 2 zero-day vulnerabilities
From Zero to Zero Day (and beyond) - Life of a Hacker: Jonathan Jacobi
Intel again making chips for Apple? Googlebook + [UNNAMED] OS - Talking Heads Ep.432
Mythos unleashed on Opensource
Dirty Frag Won't Be The Last Exploit
A Vulnerability to Hack The World - CVE-2023-4863
KDE gets €1M, 3 big vulnerabilities for Linux, EU privacy disaster brewing - Linux Weekly News
FSF settles the Office Suite debacle, good news on age verification - Linux Weekly News
…Such assumptions are tricky in this day and age , though. Mercifully for Captain Cook's ship, instead of being a zero-day reveal out of nowhere that left systems administrators scrambling, the…
…like firewalls, routers, and VPNs, generally by exploiting zero-day bugs. Operators of edge devices don't often protect them with endpoint security products, so attacks running the machines often evade defenders…
…The security sleuth posted the zero-day exploit known as YellowKey , which essentially enabled them to access a locked file. As explained by our friends over at Tom's Hardware : The company…
…The TrendAI Zero Day Initiative uncovered another handful of vulnerabilities within the X.Org Server codebase. These days, most of the X.Org Server releases are motivated for addressing security issues. Some…
TL;DR: IncusOS enforces security by default, Proxmox trusts you to configure it yourself. Immutable host, atomic updates, zero OS maintenance. Lacks PBS and a mature UI. Not a Proxmox replacement yet but worth watching. …
Hi, I'm in my first real IT role infrastructure engineer role at a hosting company. Before this I was more on the telecom and hardware side, so the past couple of months have been a steep learning curve. I've picked up a…
Posting this as a PSA / confession because I almost had a heart attack last night and I figure if I got bit, someone else will too. TL;DR: Replaced pangolin + NPMplus with a double-Caddy + WireGuard setup. Put a "clever"…
Hi HN, I’m Mike (MikeWhob).I built Mach Triage because I am honestly sick of the overhead of Jira and wanted a faster and more logical (to me) way to interact with tickets. Also I got tired of my boss being on my ass for…
Everything begins with a story. Stories change lives. Stories change the world.And we all have stories and worlds to share, yet most of us struggle to express our thoughts on paper. At Creader.io, our mission is to bette…
Microsoft confirmed active exploitation of CVE-2026-42897, a zero-day in on-premises Exchange Server that lets attackers execute arbitrary JavaScript in a victim's browser by sending a crafted email…
Security Microsoft locks out VeraCrypt and WireGuard devs, blames verification process No emails, no warnings, no humans – just bots, catch-22s, and a 60-day appeals queue Microsoft says that it will…
…These five changes will make your home lab harder to compromise, easier to recover, and safer to run day-to-day. Quick disclaimer: security is never guaranteed and it’s always changing…
…AI chained four zero-days into one exploit that bypassed both renderer and OS sandboxes. A wave of new exploits is coming. At the Autonomous Validation Summit (May 12 & 14), see how…
…a robust, secure cloud storage platform you pay for once and keep for life. Right now, pCloud is running a special Family Day promotion. From May 11 through May 24, you can…
…These include advanced persistent threats (APTs), ransomware campaigns, and zero-day exploitation attempts,” he added. Palaniappan said CSG’s security teams “are operating at an elevated alert level” and have “accelerated vulnerability…
