Skip to main content

Share story

Security

CISA adds exploited Chromium V8 flaw to KEV catalog

CISA adds exploited Chromium V8 flaw to KEV catalog Image: Primary
CISA has added CVE-2026-85046, a Chromium V8 type-confusion vulnerability, to its Known Exploited Vulnerabilities catalog, saying it is actively exploited. The flaw can be triggered when a target loads a specially crafted HTML page and may permit arbitrary code execution inside the browser sandbox. Chrome is directly affected, while other Chromium-based browsers may be affected depending on their V8 and Chromium versions. Google has issued a Stable Channel update for Chrome desktop users.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business. This story was sourced from cybersecuritynews.com and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Security
Security

Chrome adds warnings for suspicious sites and copied scam commands

Google announced new Chrome Enhanced Protection defenses that check suspicious websites and warn about copied commands used in ClickFix scams, 9to5Google reported. Those scams persuade users to run commands that install malware, b...

Security
Security

Hacker sentenced to eight years over tax-business phishing scheme

Chukwuemeka Victor Amachukwu was sentenced to eight years in prison for his role in spearphishing attacks against U.S. tax preparation businesses, authorities announced Monday. He pleaded guilty to conspiracy to commit computer in...

Policy AI
Policy AI

US orders civilian agencies to remove DeepSeek technology

The United States has ordered federal civilian agencies to stop buying DeepSeek products and services and remove them from government IT systems, according to the Department of Homeland Security. The restrictions also cover third-...

AI Security
AI Security

GitLab opens beta dashboard for auditing coding agents

GitLab introduced a beta AI Governance Dashboard for Premium and Ultimate customers that brings its own coding agents and connected external agents into one audit view. It links agent activity to developers and projects, showing s...

Security
Security

Go security releases block eight certificate authority keys

Go 1.27.3 and Go 1.26.10, released October 20, reject certificate chains passing through eight intermediate certificate authority keys, The Hacker News reports. The Go team recommends immediate upgrades, citing security concerns a...