InfoSecBulletin Cybersecurity for mankind
Google released an urgent security update for Chrome to address a high-severity zero-day vulnerability being actively exploited. This flaw, known as CVE-2026-2441, affects the browser’s CSS component and could let attackers run harmful code on a victim’s machine through a compromised webpage.
Attackers can use a “dangling pointer” to insert malicious data into memory. When the browser accesses the original data, it runs the attacker’s code instead. Since the flaw is in the CSS engine, a central part of modern web rendering, the risk is significant.
CVE-2026-18574
Check Point Authentication Bypass Hits Management Server
TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
ExfilSquad releases info of over 100,000 UK police officers, staff
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Google has confirmed that an exploit for CVE-2026-2441 is active. This vulnerability was reported by security researcher Shaheen Fazim on February 11, 2026.
The fix is now being released to the Stable channel. Users should check their browser version and update right away to fix this security issue.
Windows & Mac: Update to version 145.0.7632.75/.76
Linux: Update to version 144.0.7559.75
Update Chrome by going to Settings > About Chrome. Complete the download and then relaunch the browser. Admins should prioritize this patch due to active exploitation.
