InfoSecBulletin Cybersecurity for mankind
Google released an urgent security update for Chrome to address a high-severity zero-day vulnerability being actively exploited. This flaw, known as CVE-2026-2441, affects the browser’s CSS component and could let attackers run harmful code on a victim’s machine through a compromised webpage.
Attackers can use a “dangling pointer” to insert malicious data into memory. When the browser accesses the original data, it runs the attacker’s code instead. Since the flaw is in the CSS engine, a central part of modern web rendering, the risk is significant.
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
Google has confirmed that an exploit for CVE-2026-2441 is active. This vulnerability was reported by security researcher Shaheen Fazim on February 11, 2026.
The fix is now being released to the Stable channel. Users should check their browser version and update right away to fix this security issue.
Windows & Mac: Update to version 145.0.7632.75/.76
Linux: Update to version 144.0.7559.75
Update Chrome by going to Settings > About Chrome. Complete the download and then relaunch the browser. Admins should prioritize this patch due to active exploitation.
