Check Point has released urgent patches for a critical-severity zero-day vulnerability in its Management Server products that allows unauthenticated attackers to execute arbitrary scripts.
Google has issued a major security update for Chrome 154, addressing 108 vulnerabilities, including 11 critical-severity flaws related to memory safety.
Arista has released urgent security updates for its on-premises VeloCloud Orchestrator to address a critical zero-day vulnerability currently being exploited by remote attackers.
A new Linux kernel vulnerability, CVE-2026-89775, allows ARM64 KVM guests to read and write host kernel memory if nested virtualization is enabled.
Threat actors exploited CVE-2026-7273 in ZyXEL GS1900 switches to steal credentials and configuration data from devices across 48 countries.
