InfoSecBulletin Cybersecurity for mankind
Google released an urgent security update for Chrome to address a high-severity zero-day vulnerability being actively exploited. This flaw, known as CVE-2026-2441, affects the browser’s CSS component and could let attackers run harmful code on a victim’s machine through a compromised webpage.
Attackers can use a “dangling pointer” to insert malicious data into memory. When the browser accesses the original data, it runs the attacker’s code instead. Since the flaw is in the CSS engine, a central part of modern web rendering, the risk is significant.
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Google has confirmed that an exploit for CVE-2026-2441 is active. This vulnerability was reported by security researcher Shaheen Fazim on February 11, 2026.
The fix is now being released to the Stable channel. Users should check their browser version and update right away to fix this security issue.
Windows & Mac: Update to version 145.0.7632.75/.76
Linux: Update to version 144.0.7559.75
Update Chrome by going to Settings > About Chrome. Complete the download and then relaunch the browser. Admins should prioritize this patch due to active exploitation.
