Share story
Security

Chrome 153 fixes actively exploited V8 flaw

Chrome 153 fixes actively exploited V8 flaw Image: Primary
Google released Chrome 153 to the stable channel with fixes for 230 vulnerabilities, including CVE-2026-87491, an out-of-bounds write flaw in the V8 JavaScript and WebAssembly engine. Google says an exploit for the medium-severity vulnerability exists in the wild. The release is rolling out as 153.0.8010.36/.37 for Windows and macOS and 153.0.8010.36 for Linux. It also resolves five critical-severity flaws and 41 high-severity defects.
Sources
SecurityWeek
In this story
Google Microsoft Apple
Published by Tech & Business, a media brand covering technology and business. This story was sourced from SecurityWeek and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Security
Security

Go security releases block eight certificate authority keys

Go 1.27.3 and Go 1.26.10, released October 20, reject certificate chains passing through eight intermediate certificate authority keys, The Hacker News reports. The Go team recommends immediate upgrades, citing security concerns a...

The Hacker News
Security
Security

Chrome adds warnings for suspicious sites and copied scam commands

Google announced new Chrome Enhanced Protection defenses that check suspicious websites and warn about copied commands used in ClickFix scams, 9to5Google reported. Those scams persuade users to run commands that install malware, b...

9to5Google
Security
Security

Leaked Cellebrite document describes new iPhone unlocking appliance

A leaked confidential Cellebrite document describes an iPhone unlocking product called Advanced Unlocks that uses a dedicated appliance with a stated range of about 8 meters, Schneier on Security reports, citing Justin.sh. Celleb...

Schneier on Security
Security
Security

Hacker sentenced to eight years over tax-business phishing scheme

Chukwuemeka Victor Amachukwu was sentenced to eight years in prison for his role in spearphishing attacks against U.S. tax preparation businesses, authorities announced Monday. He pleaded guilty to conspiracy to commit computer in...

BleepingComputer
Policy AI
Policy AI

US orders civilian agencies to remove DeepSeek technology

The United States has ordered federal civilian agencies to stop buying DeepSeek products and services and remove them from government IT systems, according to the Department of Homeland Security. The restrictions also cover third-...

TechCrunch