The Indian Computer Emergency Response Team (Cert-In) has issued a critical warning regarding multiple vulnerabilities identified in the Google Chrome desktop browser and the GitLab platform, which could be exploited by cybercriminals to execute arbitrary code, bypass security measures, and potentially compromise sensitive user data. Specific vulnerabilities include issues with the V8 engine, extensions, and various security UI elements, affecting Chrome versions prior to 142.0.7444.59 for Linux and 142.0.7444.60 for Windows and Mac. Cert-In emphasized …

The recent Pwn2Own event in Ireland unveiled 73 significant zero-day vulnerabilities across various technologies, attracting ethical hackers competing for over USD $2 million in prizes. Among the notable exploits, vulnerabilities in the Samsung Galaxy S25 were demonstrated, allowing access to critical features like the camera and location tracking. Trend Micro, which organized the event, emphasized that findings from Pwn2Own enhance cybersecurity, enabling vendors to patch vulnerabilities before they can be weaponized. As cyber threats grow …

The emergence of AI-powered web browsers, such as OpenAI’s ChatGPT Atlas and Microsoft’s Copilot Mode, has sparked concerns among cybersecurity experts regarding potential vulnerabilities and data breaches. These browsers, which integrate AI to enhance user experience, may inadvertently expose users to increased tracking, privacy invasions, and hacking risks. Researchers have already identified flaws that could allow malicious actors to manipulate browser functionalities and access sensitive information. Experts advise caution, suggesting that users should limit the …

OpenAI has introduced Aardvark, an innovative cybersecurity agent powered by GPT-5, currently in private beta. This tool assists security teams by identifying and addressing vulnerabilities within software codebases, leveraging advanced reasoning and tool utilization to enhance software security. By examining repositories, Aardvark discovers potential security flaws, explains them, and proposes fixes, streamlining the vulnerability management process. This development underscores the growing reliance on AI in cybersecurity, addressing the challenge of increasing vulnerabilities and reflecting a …

A newly disclosed vulnerability, codenamed “Brash,” in the Blink rendering engine of Chromium-based browsers could lead to their instant crashes when exploited through a malicious URL. Security researcher Jose Pino explained that the flaw allows attackers to efficiently bombard browsers with excessive document.title updates, overwhelming the main thread and causing unresponsiveness. This exploit can be programmed to activate at precise moments, functioning akin to a logic bomb that operates undetected until triggered. The vulnerability affects …

The Canadian Centre for Cyber Security has issued a warning regarding breaches by hacktivists targeting critical infrastructure, including water treatment, oil, and agricultural facilities. These opportunistic attacks manipulated industrial controls, resulting in service disruptions and posing potential safety risks, though no catastrophic consequences were reported. Authorities emphasized the importance of strengthening security measures for internet-exposed Industrial Control Systems (ICS) and suggested proactive steps such as inventory assessments, VPN usage, and firmware updates. This rising trend …

Russian state-linked cyber activity continues to threaten Ukrainian organizations, with the notorious Sandworm group employing low-malware, stealthy attacks that exploit legitimate Windows tools. Recent intrusions highlight the group’s shift towards intelligence gathering rather than overt disruption, utilizing techniques that allow for long-term persistence while minimizing detection risks. These attacks showcase the evolving landscape of cyber warfare, where traditional defenses struggle against state-sponsored actors leveraging native system functionalities. The implications of these developments are significant, as …