InfoSecBulletin Cybersecurity for mankind
Google released an urgent security update for Chrome to address a high-severity zero-day vulnerability being actively exploited. This flaw, known as CVE-2026-2441, affects the browser’s CSS component and could let attackers run harmful code on a victim’s machine through a compromised webpage.
Attackers can use a “dangling pointer” to insert malicious data into memory. When the browser accesses the original data, it runs the attacker’s code instead. Since the flaw is in the CSS engine, a central part of modern web rendering, the risk is significant.
CISA launched two free tools Identify Security Misconfig in Microsoft 365 and Google Workspace
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
Daily Cyber security update for 26.10. 2026
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Google has confirmed that an exploit for CVE-2026-2441 is active. This vulnerability was reported by security researcher Shaheen Fazim on February 11, 2026.
The fix is now being released to the Stable channel. Users should check their browser version and update right away to fix this security issue.
Windows & Mac: Update to version 145.0.7632.75/.76
Linux: Update to version 144.0.7559.75
Update Chrome by going to Settings > About Chrome. Complete the download and then relaunch the browser. Admins should prioritize this patch due to active exploitation.
