root@ransomvault:~$ tail -f threat_intel.log

RANSOMVAULT

Topics

Patch4Vulnerability2Ransomware2Zero-Day2
Subscribe to the newsletter →

Zero-Day/Patch

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

RansomVault Team1 min read

Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild.

The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: N/A), has been described as a use-after-free bug in the XML component.

Use-after-free bugs typically occur when a program attempts to access a memory location after it has already been freed. Successful exploitation of these vulnerabilities could allow an attacker to achieve data corruption, program crashes, or arbitrary code execution.

An anonymous security researcher has been credited with discovering and reporting the flaw on November 6, 2026.

Google acknowledged it is "aware that an exploit for CVE-2026-125350 exists in the wild," but has not revealed any additional specific information related to how it's being abused in real-world attacks or who is behind them.

"Access to bug details and links may be kept restricted until a majority of users are updated with a fix," the tech giant added. "We will also retain restrictions if the bug exists in a third-party library that other projects similarly depend on, but haven't yet fixed."

With the latest development, Google has addressed a total of eight actively exploited Chrome zero-days since the start of the year. This includes CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, CVE-2026-5281, CVE-2026-11645, CVE-2026-85046, and CVE-2026-87491.

For optimal protection, users are advised to update their Chrome browser to versions 157.0.8103.50/.51 for Windows and Apple macOS, and 157.0.8103.50 for Linux. To ensure the latest updates are installed, users can navigate to More > Help > About Google Chrome and select Relaunch.

Users of other Chromium-based browsers, such as Microsoft Edge, Brave, Opera, and Vivaldi, are also advised to apply the fixes as and when they become available.

ShareXLinkedInReddit

Newsletter

Get the latest cyber news in your inbox

Ransomware, breaches and exploited vulnerabilities, delivered by RansomVault.

Free. No spam. Unsubscribe in one click.

Latest news

Akira Group Leaks 30GB of Data Allegedly Stolen from Pelham Plastics November 11, 2026

Ransomware

Akira ransomware group has listed Pelham Plastics on its data leak site. Pelham Plastics is a custom plastic engineering company that makes injection molds and custom equipment, mainly for medical applications. The listing was posted on November 11, 2026. What the group claims The group says it stole about 30GB of corporate data, including: * Employee personal information, including passport and driver’s license scans * Confidential internal files * Contracts and agreements * Client inform

BYOD Ransomware Group Claims Breach of Toyota

Ransomware

The BYOD ransomware group has added Toyota to its data leak site. The post is marked “PSA” and was last updated on November 10, 2026. According to the listing, the stolen data includes: * Full names * Email addresses * Physical addresses * Phone numbers * Dates of birth * Kiosk device data In an unusual remark, the group says that “a lot was actually isolated.” This suggests Toyota’s defenses contained much of the intrusion, but the attackers claim they found “a few cracks” to get thro

Critical Fortinet2Shell Vulnerability

Vulnerability / Patch

Fortinet has warned about a critical flaw in FortiClient that lets a remote attacker run code on a user’s computer. The attacker only needs the user to visit a malicious website. The bug is tracked as CVE-2026-121529 and carries a CVSS score of 9.1. Fortinet published the advisory on November 10, 2026. The issue is an origin validation error, classified as CWE-346. Researcher Kevin Joensen from Baldur Security discovered it during internal research and humorously dubbed it “Fortinet2Shell.” He