News · via Chrome Releases
Chrome for Android Update
Hi, everyone! We've just released Chrome 157 (157.0.8103.38) for Android. It'll become available on Google Play over the next few days.
Windows
Coverage tagged "Windows".
News · via oss-security
CVE-2026-59264: Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer
Posted by Arrigo Marchiori on Nov 03 Severity: moderate Affected versions: - Apache OpenOffice through 4.1.16 Description: The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an…
News · via Chrome Releases
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 157.0.8103.38 (Linux)…
News · via Chrome Releases
Extended Stable Update for Desktop
The Extended Stable channel has been updated to 156.0.8078.88 for Windows and Mac which will roll out over the coming days/weeks. Security changes will be updated shortly A full list of changes in…
News · via Microsoft Security
Fake-download campaign uses trojanized installers to deliver monetization payloads
Attack chain overview Mitigation and protection guidance Learn More Microsoft Threat Intelligence has identified an evolving fake-download campaign targeting users searching for cracked commercial…
News · via Ars Technica
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
In 2023, malware tracked as BlackLotus became the first publicly documented in-the-wild UEFI bootkit capable of bypassing Secure Boot on fully updated Windows 11 systems. With the industry-wide…
News · via Zero Day Initiative
ZDI-26-868: Microsoft Windows Aero Theme Improper Handling Of Error Condition Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged…
News · via arXiv cs.CR
When Benign Is Unverified: Label-Signal Mismatch and Abstention-First Triage in Graph-Based Memory Forensics
arXiv:2611.01225v1 Announce Type: new Abstract: Machine-learning triage for memory forensics is usually validated on corpora whose benign class is asserted by provenance and never verified. We report…
News · via Microsoft Security
What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
Classifying the vulnerability landscape Vulnerabilities exploited in the wild Where defenders should focusPatching is slow, while exploitation is fast Impact, exposure and where to focus Next in line…
News · via Security Affairs
VOLTA, the infostealer that asks an AI which victims are worth the effort
VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims’ value and rank targets for attackers. Cisco Talos has analyzed a new Windows infostealer called VOLTA…
News · via Help Net Security
AI-powered infostealer picks out the most profitable parts of your stolen data
A new Windows infostealer sends the data it steals to an AI model and asks it to rank the victim’s assets by how much money they could bring in, Cisco Talos has found. “There is a new idea in the…
News · via Canadian Centre for Cyber Security
Google security advisory (AV26-1109)
Serial number: AV26-1109 Date: November 2, 2026 As of October 29, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to…
News · via Dark Reading
PapRAT Cyber Espionage Campaign Leaves a 'BITTER' Taste in South Asia
Organizations in the region face attacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains.
News · via BleepingComputer
Microsoft fixes Smart App Control broken by October Windows update
Microsoft has resolved a known issue that prevented some users from activating the Smart App Control security feature after installing the October 2026 KB5127648 Windows 11 security update.
News · via Rapid7
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
OverviewOn October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357…
News · via The Hacker News
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their…
News · via The Hacker News
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
Cybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky…
News · via Cisco Talos
Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
VOLTA is a mature stealer implant with an optional AI-integration layer. After stealing credentials, sessions, and cryptocurrency wallets, VOLTA sends a structured evidence bundle to an LLM to rank…
News · via Microsoft Security
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
Activity overview Attack chain overview Portable runtime staging and execution variants Host discovery and AD CS assessment Case 1: ESC1 abuse and the cost of an identity exclusion Case 2: PetitPotam…
News · via Chrome Releases
Chrome Dev for Desktop Update
The Dev channel has been updated to 159.0.8130.0 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release channels?