Google News Articles

WebXR Flaw Hits 4 Billion Chromium Users, Update Your Browser Now

A serious security vulnerability in the underlying technology for most of the world’s web was recently discovered in the underlying code for most of the world’s web browsers, putting over 4 billion devices at...

5 days ago

CVE-2025-48633 and CVE-2025-48572: Android Framework Information Disclosure and Privilege Escalation Vulnerabilities Exploited in the Wild | SOC Prime

Explore details for CVE-2025-48633 and CVE-2025-48572, high-severity Android Framework vulnerabilities, with a deep analysis on our SOC Prime blog.

6 days ago

Google fixes Android vulnerabilities "under targeted exploitation" (CVE-2025-48633, CVE-2025-48572) - Help Net Security

Google patches Android vulnerabilities, including CVE-2025-48633 and CVE-2025-48572, which "may be under limited, targeted exploitation".

1 week ago

CISA Warns of Android 0-Day Vulnerability Exploited in Attacks

These security flaws, found within the Android Framework, are currently being exploited in the wild, prompting a federal mandate for immediate remediation by December 23, 2025.

1 week ago

CISA Warns of Android 0-Day Vulnerability Exploited in Attacks

CISA added two major Android Framework flaws to its Known Exploited Vulnerabilities list, showing they’re already being used in real attacks.

1 week ago

Pair of Android vulnerabilities added to CISA’s KEV catalogue

Google said there were “indications” of active exploitation of CVE-2025-48633 and CVE-2025-48572, and now the US cyber agency has confirmed it.

1 week ago

Two Android 0-day bugs patched, plus 105 more fixes

Two high-severity Android bugs were exploited as zero-days before Google issued a fix, according to its December Android security bulletin.  The two vulnerabilities are CVE-2025-48633, an...

1 week ago

Google Patches Android 0-Day Vulnerabilities Exploited in the Wild

The vulnerabilities, disclosed in the December 2025 Android Security Bulletin, affect multiple Android versions

1 week ago

Google addresses 107 Android vulnerabilities, including two zero-days

The company’s latest security update contains the second-highest number of defects patched so far this year.

1 week ago

Google releases urgent update for Chrome: Why you should update your browser right now - The Times of India

Tech News News: Google has released a critical security update for its Chrome browser. Hackers are actively exploiting a vulnerability, putting users at risk. This fl

2 weeks ago

Chrome, Oracle vulnerabilities added to Known Exploited Vulnerabilities Catalog

Type confusion bug in Chrome and a critical severity issue in Oracle Fusion Middleware’s Identity Manager component are in hackers’ crosshairs.

2 weeks ago

Week in review: Stealth-patched FortiWeb vulnerability under active exploitation, Logitech data breach - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The tech that turns supply chains from brittle to

2 weeks ago

Google Chrome Users At Risk: Indian Government Issues Urgent Security Alert

CERT-In has issued a security alert for Google Chrome users, urging immediate updates for Windows, macOS, and Linux due to severe vulnerabilities identified as CVE-2025-13223 and CVE-2025-13224. , Technology & Science, Times Now

3 weeks ago

CISA Alerts Users to Active Attacks on Chrome 0-Day Vulnerability

CISA has added a critical vulnerability affecting Google Chrome to its KEV catalog, warning of active exploitation in the wild.

3 weeks ago

Attacks Confirmed—Google Issues Emergency Update For 2 Billion Chrome Users

Update now warning suddenly issued for all Google Chrome users. Act now.

3 weeks ago

Attacks Confirmed—Google Issues Emergency Update For 2 Billion Chrome Users

Update now warning suddenly issued for all Google Chrome users. Act now.

3 weeks ago

Google Chrome bug exploited as an 0-day - patch now

Google pushed an emergency patch on Monday for a high-severity Chrome bug that attackers have already found and exploited in the wild. The vulnerability, tracked as CVE-2025-13223, is a type confusion flaw in...

3 weeks ago

Google patches yet another exploited Chrome zero-day (CVE-2025-13223) - Help Net Security

Google has shipped a fix for a Chrome vulnerability (CVE-2025-13223) reported as exploited in the wild by its Threat Analysis Group.

3 weeks ago

Google fixed the seventh Chrome zero-day in 2025

Google patched two Chrome flaws, including a V8 type-confusion bug, tracked as including CVE-2025-13223, which was exploited in the wild.

3 weeks ago

Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability

Google patches two critical V8 flaws, including actively exploited CVE-2025-13223, urging immediate Chrome updates.

3 weeks ago

Chrome 142 Update Patches Exploited Zero-Day

Google rolled out an emergency Chrome 142 update to address CVE-2025-13223, a vulnerability exploited in the wild as a zero-day.

3 weeks ago

CERT-In Issues High Alert for Millions of Android Users in India: Who’s at Risk and How to Stay Safe - The Logical Indian

CERT-In warns millions of Android users in India to update November 2025 security patches urgently to fix critical zero-click vulnerability.

Google Chrome 142 Fixes RCE Flaws CVE-2025-12725, 12727

Google’s Chrome 142 update patches critical RCE bugs, including CVE-2025-12725 in WebGPU and CVE-2025-12727 in V8. Users urged to update immediately.

CVE-2025-48593: Critical Zero-Click Vulnerability in Android Enables Remote Code Execution | SOC Prime

Explore CVE-2025-48593 analysis, a critical remote code execution vulnerability in Android, with the details on the SOC Prime blog.

Critical Android 0-Click Vulnerability Enables Remote Code Execution

The vulnerability, tracked as CVE-2025-48593, represents a severe risk to Android devices worldwide and affects multiple versions of the operating system.

Samsung And Google Issue Update Warning—No Fix For 1 Billion Users

Update now warning issued for all Android users — check now to see if you can get this or need to upgrade your phone.

Google Wear OS Message App Vulnerability Let Any Installed App To Send SMS Behalf Of User

A vulnerability in Google Messages on Wear OS devices allows any installed app to silently send SMS, MMS, or RCS messages on behalf of the user.

Google Wear OS Message App Vulnerability Let Any Installed App To Send SMS Behalf Of User

A vulnerability in Google Messages on Wear OS devices allows any installed app to silently send SMS, MMS, or RCS messages on behalf of the user.

Italian-made spyware Dante linked to Chrome zero-day exploitation campaign - Help Net Security

A Chrome zero-day flaw was used by unknown attackers to deliver LeetAgent, suspected commercial spyware with ties to Memento Labs' Dante.

Chrome Zero-Day Exploited to Deliver Italian Memento Labs' LeetAgent Spyware

Kaspersky reveals Chrome zero-day CVE-2025-2783 exploited to deploy Memento Labs’ LeetAgent spyware.

Memento Labs, the ghost of Hacking Team, has returned — or maybe it was never gone at all.

Kaspersky links the first Chrome zero-day of 2025 to tools used in attacks attributed to Memento Labs, formerly known as the Hacking Team.

Memento Spyware Tied to Chrome Zero-Day Attacks

While investigating the cyberattacks, researchers uncovered a new spyware product from Memento Labs, the successor to the infamous Hacking Team.

Chrome 0-Day Exploited in Espionage by Mem3nt0 Mori

Hackers exploit a Chrome 0-day to deploy spyware in attacks tied to Mem3nt0 Mori. Google patches CVE-2025-2783; users urged to update fast.

Italian spyware vendor linked to Chrome zero-day attacks

A zero-day vulnerability in Google Chrome exploited in Operation ForumTroll earlier this year delivered malware linked to Italian spyware vendor Memento Labs, born after IntheCyber ​​Group acquired the infamous Hacking Team.

Italian spyware vendor linked to Chrome zero-day attacks

A zero-day vulnerability in Google Chrome exploited in Operation ForumTroll earlier this year delivered malware linked to Italian spyware vendor Memento Labs, born after IntheCyber ​​Group acquired the infamous Hacking Team.

Chrome 0-Day Vulnerability Actively Exploited in Attacks by Notorious Hacker Group

The notorious Mem3nt0 mori hacker group has been actively exploiting a zero-day vulnerability in Google Chrome to compromise high-profile targets across Russia and Belarus.

Mem3nt0 mori – The Hacking Team is back!

Kaspersky researchers discovered previously unidentified commercial Dante spyware developed by Memento Labs (formerly Hacking Team) and linked it to the ForumTroll APT attacks.

CVE-2025-12036 Vulnerability: A New Critical Chrome V8 JavaScript Engine Flaw Enables Attackers to Execute Remote Code on Vulnerable Systems | SOC Prime

Explore CVE-2025-12036 details, a critical Chrome V8 JavaScript engine Vulnerability leading to RCE, with an in-depth overview on our SOC Prime blog.

Chrome V8 JavaScript Engine Vulnerability Allows Attackers to Execute Remote Code

The vulnerability was discovered by Google's Big Sleep project on October 15, 2025, marking another significant find by the company's AI-powered security research initiative.

Cursor, Windsurf IDEs riddled with 94+ n-day Chromium vulnerabilities

The latest releases of Cursor and Windsurf integrated development environments are vulnerable to more than 94 known and patched security issues in the Chromium browser and the V8 JavaScript engine.

Google Fixes Critical Chrome Remote Code Execution Bug

Google patches a Chrome Safe Browsing flaw (CVE-2025-11756) that lets attackers execute code remotely. Users urged to update immediately.

New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions

Pixnapping side-channel can steal 2FA codes pixel-by-pixel on Android 13–16; CVE-2025-48561 patched Sept 2025 but workaround exists.

Multiple Chrome Vulnerabilities Let Attackers Execute Arbitrary Code

Google’s October 2025 desktop update for Chrome addresses three critical memory handling flaws that could allow drive-by arbitrary code execution

Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions

Google releases critical Chrome update patching zero-day CVE-2025-10585, discovered Sept 16, to block active V8 JavaScript engine exploits worldwide.

Apple patches security flaw exploited in Chrome zero-day attacks

Apple has released security updates to address a high-severity vulnerability that has been exploited in zero-day attacks targeting Google Chrome users.

Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome

Apple and Google fix CVE-2025-6558, a zero-day bug in Chrome and Safari risking browser security.

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

CISA has added one new vulnerability to its KEV Catalog, based on evidence of active exploitation

CISA Alerts on Google Chromium Input Validation Flaw Actively Exploited

CISA has issued a critical alert regarding a severe input validation vulnerability in Google Chromium that threat actors are actively exploiting.

High Severity Zero-Day Vulnerability in Google Chrome

Google has released security updates to address a zero-day vulnerability in its Chrome browser. Users and administrators are advised to update to the latest....

Microsoft’s Response to Open-Source Vulnerabilities - CVE-2023-4863 and CVE-2023-5217 | MSRC Blog | Microsoft Security Response Center

Microsoft’s Response to Open-Source Vulnerabilities - CVE-2023-4863 and CVE-2023-5217