Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 42 CEF Exploitable Race Condition Memory Access Vulnerability
Update to cef-144.0.11+ge135be2 + chromium 144.0.7559.96 (rhbz#2432335) CVE-2026-1220: Race in V8 CVE-2026-0899: Out of bounds memory access in V8 CVE-2026-090…
Fedora 43 cef Critical Race Condition Memory Access Issues 2026-c5295ae3b9
Update to cef-144.0.11+ge135be2 + chromium 144.0.7559.96 (rhbz#2432335) CVE-2026-1220: Race in V8 CVE-2026-0899: Out of bounds memory access in V8 CVE-2026-090…
Model Security Is the Wrong Frame – The Real Risk Is Workflow Security
As AI copilots and assistants become embedded in daily work, security teams are still focused on protecting the models themselves. But recent incidents suggest…
Fedora 43 CEF High CVE-2025-14765 Critical Update for WebGPU Issues
Update to cef-143.0.10+g8aed01b + chromium-143.0.7499.146 (rhbz#2423482) High CVE-2025-14765: Use after free in WebGPU High CVE-2025-14766: Out of bounds read …
Fedora 42: Addressing CEF High Security Vulnerabilities CVE-2025-14765
Update to cef-143.0.10+g8aed01b + chromium-143.0.7499.146 (rhbz#2423482) High CVE-2025-14765: Use after free in WebGPU High CVE-2025-14766: Out of bounds read …
Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild
Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its Safari web browser to address two security flaws that it sai…
Fedora 42: cef High Type Confusion Vuln CVE-2025-13223,13224 Advisory
Update to cef-142.0.17+g60aac24 & chromium 142.0.7444.175 (rhbz#2413981) High CVE-2025-13223: Type Confusion in V8 High CVE-2025-13224: Type Confusion in V8
Webinar: The "Agentic" Trojan Horse: Why the New AI Browsers War is a Nightmare for Security Teams
The AI browser wars are coming to a desktop near you, and you need to start worrying about their security challenges.For the last two decades, whether you used…
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT
The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote a…
Fedora 42: cef High Updates for Multiple CVEs FEDORA-2025-313f6d7702
Update to 141.0.7390.122 High CVE-2025-12036 chromium: Inappropriate implementation in V8 High CVE-2025-11756: Use after free in Safe Browsing High CVE-2025-11…
Fedora 43: cef High CVE-2025-12036 Update 2025-6c9c483e21
Update to 141.0.7390.122 High CVE-2025-12036 chromium: Inappropriate implementation in V8 High CVE-2025-11756: Use after free in Safe Browsing High CVE-2025-11…
When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider
As enterprises continue to shift their operations to the browser, security teams face a growing set of cyber challenges. In fact, over 80% of security incident…
Fedora 42: CEF Critical Type Confusion Issues CVE-2025-8010 2025-b7cb89ddd3
CVE-2025-8010: Type Confusion in V8 CVE-2025-8011: Type Confusion in V8 CVE-2025-8576: Use after free in Extensions CVE-2025-8578: Use after free in Cast CVE-2…
Fedora 42: CEF Critical Integer Overflow and WebRTC Fixes 2025-828bc3d3f5
Update to cef-138.0.25+g251e1c1/chromium138.0.7204.157 (rhbz#2380429) Update to cef-138.0.21+g54811fe (rhbz#2379500)
Fedora 42: FEDORA-2025-282f181e6f important: cef type confusion
Update to chromium 138.0.7204.92
Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL Server
For the first time in 2025, Microsoft's Patch Tuesday updates did not bundle fixes for exploited security vulnerabilities, but the company acknowledged one of …
Ubuntu DSA-5943-2: Severe Firefox Buffer Overflow Vulnerability Fixed
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Mageia 9: 2025-0181 moderate: cockpit DoS attack resolution
Mageia's internal bug: In the current version you can't login in the web interface with firefox or chromium-browser packaged by Mageia. This update fixes the i…
Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025
Cybersecurity researchers have shed light on a new campaign targeting Brazilian users since the start of 2025 to infect users with a malicious extension for Ch…
Malicious Browser Extensions Infect Over 700 Users Across Latin America Since Early 2025
Cybersecurity researchers have shed light on a new campaign targeting Brazilian users since the start of 2025 to infect users with a malicious extension for Ch…
SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps
Cybersecurity researchers have found that threat actors are setting up deceptive websites hosted on newly registered domains to deliver a known Android malware…
Secure Your DevTools: Critical UAF Vulnerability Warning
With the recent discovery of a significant Chrome vulnerability tagged as CVE-2025-0762 , Google Chrome has again come under fire. This new threat, found in th…
Fedora 40: webkitgtk 2024-4014fa4ecc Security Advisory Updates
Improve memory consumption and performance of Canvas getImageData. Fix preserve-3D intersection rendering. Fix video dimensions since GStreamer 1.24.9. Fix the…
Fedora 41: webkitgtk 2024-472d01833c Security Advisory Updates
Improve memory consumption and performance of Canvas getImageData. Fix preserve-3D intersection rendering. Fix video dimensions since GStreamer 1.24.9. Fix the…