InfoSecBulletin Cybersecurity for mankind
Google released an urgent security update for Chrome to address a high-severity zero-day vulnerability being actively exploited. This flaw, known as CVE-2026-2441, affects the browser’s CSS component and could let attackers run harmful code on a victim’s machine through a compromised webpage.
Attackers can use a “dangling pointer” to insert malicious data into memory. When the browser accesses the original data, it runs the attacker’s code instead. Since the flaw is in the CSS engine, a central part of modern web rendering, the risk is significant.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
Google has confirmed that an exploit for CVE-2026-2441 is active. This vulnerability was reported by security researcher Shaheen Fazim on February 11, 2026.
The fix is now being released to the Stable channel. Users should check their browser version and update right away to fix this security issue.
Windows & Mac: Update to version 145.0.7632.75/.76
Linux: Update to version 144.0.7559.75
Update Chrome by going to Settings > About Chrome. Complete the download and then relaunch the browser. Admins should prioritize this patch due to active exploitation.
