The Hacker News reports that Google has fixed three Chrome bugs that could let an attacker run code on a Windows computer when a user only loads a web page. Two of the bugs were fixed in Chrome 152.0.7977.65 and 152.0.7977.82; Chrome updates automatically, but the fix only applies after the browser restarts, so Windows users should relaunch Chrome and confirm it is 152.0.7977.82 or later.
Source: thehackernews.com
…
The Hacker News reports that LG has fixed three webOS vulnerabilities that could let an attacker on the same local network gain root access to certain smart TVs without a PIN or any action from the owner. Owners of affected TVs should check for a firmware update. No workaround is available for those who cannot update yet.
Source: thehackernews.com
SecurityWeek reports that attackers are already exploiting a critical SonicWall flaw in SMA1000 appliances days after it was disclosed. SonicWall says customers should update 6210, 7210, and 8200v models to versions 12.5.0-03082 or 12.4.3-03670. The bug could let a remote attacker direct the appliance to issue requests on their behalf and reach internal functionality.
Source: securityweek.com
Help Net Security reports that Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity flaw, CVE-2026-96940. The bug may let authenticated attackers read emails and attachments of other users in the same organization, so Exchange Server admins should install the update as soon as possible.
Source: helpnetsecurity.com
