Threat Wire
BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys

CyberWatch Newsroom Live Intel

Continuous enterprise threat intelligence tracking active in-the-wild zero-days (CISA KEV), Microsoft Windows KB cumulative updates, MSRC security advisories, and CVE remediation.

Last Checked: Nov 2, 2026 - 02:28:59 UTC (Hourly Auto-Sync Active)
Newsfeed (/feed) RSS Feed JSON API
All Security Bulletins 5,807 Active Zero-Days (KEV) 608 Microsoft Patch KBs 849 MSRC Live Wire 1,922 CISA Advisories 157 Threat Intel 2,629
Showing 13 of 2,629 advisories
Page 110 of 110
Architecting Security for Agentic Capabilities in Chrome Moderate Google Online Security
2025-12-08 Google Online Security

Architecting Security for Agentic Capabilities in Chrome

Posted by Nathan Parker, Chrome security team Chrome has been advancing the web’s security for well over 15 years, and we’re committed to meeting new challenges and opportunities with AI. Billions of people trust Chrome to keep them safe by default, and this is a responsibility we take seriously. Following the recent launch of Gemini in Chrome and the previe…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
Android expands pilot for in-call scam protection for financial apps Moderate Google Online Security
2025-12-03 Google Online Security

Android expands pilot for in-call scam protection for financial apps

Posted by Aden Haussmann, Associate Product Manager and Sumeet Sharma, Play Partnerships Trust & Safety Lead Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle. Over the last few years, we’ve launched industry-leading features to detect scams and protect users across phone calls, text messages and m…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing Important Google Online Security
2025-11-20 Google Online Security

Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing

Posted by Dave Kleidermacher, VP, Platforms Security & Privacy, Google Technology should bring people closer together, not create walls. Being able to communicate and connect with friends and family should be easy regardless of the phone they use. That’s why Android has been building experiences that help you stay connected across platforms. As part of our e…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
Rust in Android: move fast and fix things Critical CVE-2025-48530 Google Online Security
2025-11-13 Google Online Security

Rust in Android: move fast and fix things

Posted by Jeff Vander Stoep, Android Last year, we wrote about why a memory safety strategy that focuses on vulnerability prevention in new code quickly yields durable and compounding gains. This year we look at how this approach isn’t just fixing things, but helping us move faster . The 2025 data continues to validate the approach, with memory safety vulner…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
How Android provides the most effective protection to keep you safe from mobile scams Moderate Google Online Security
2025-10-30 Google Online Security

How Android provides the most effective protection to keep you safe from mobile scams

Posted by Lyubov Farafonova, Product Manager, Phone by Google; Alberto Pastor Nieto, Sr. Product Manager Google Messages and RCS Spam and Abuse; Vijay Pareek, Manager, Android Messaging Trust and Safety As Cybersecurity Awareness Month wraps up, we’re focusing on one of today's most pervasive digital threats: mobile scams. In the last 12 months, fraudsters h…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
HTTPS by default Critical Google Online Security
2025-10-28 Google Online Security

HTTPS by default

One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secure Connections”. This means Chrome will ask for the user's permission before the first access to any public site without HTTPS. The “Always Use Secure Connections” setting warns users before accessing a site without HTTPS…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
Accelerating adoption of AI for cybersecurity at DEF CON 33 Moderate Google Online Security
2025-09-24 Google Online Security

Accelerating adoption of AI for cybersecurity at DEF CON 33

Posted by Elie Bursztein and Marianna Tishchenko, Google Privacy, Safety and Security Team Empowering cyber defenders with AI is critical to tilting the cybersecurity balance back in their favor as they battle cybercriminals and keep users safe. To help accelerate adoption of AI for cybersecurity workflows, we partnered with Airbus at DEF CON 33 to host the …

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
Supporting Rowhammer research to protect the DRAM ecosystem Important Google Online Security
2025-09-15 Google Online Security

Supporting Rowhammer research to protect the DRAM ecosystem

Posted by Daniel Moghimi Rowhammer is a complex class of vulnerabilities across the industry. It is a hardware vulnerability in DRAM where repeatedly accessing a row of memory can cause bit flips in adjacent rows, leading to data corruption. This can be exploited by attackers to gain unauthorized access to data, escalate privileges, or cause denial of servic…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials Moderate Google Online Security
2025-09-10 Google Online Security

How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials

Posted by Eric Lynch, Senior Product Manager, Android Security, and Sherif Hanna, Group Product Manager, Google C2PA Core At Made by Google 2025, we announced that the new Google Pixel 10 phones will support C2PA Content Credentials in Pixel Camera and Google Photos . This announcement represents a series of steps towards greater digital media transparency: …

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
Android’s pKVM Becomes First Globally Certified Software to Achieve Prestigious SESIP Level 5 Security Certification Moderate Google Online Security
2025-08-12 Google Online Security

Android’s pKVM Becomes First Globally Certified Software to Achieve Prestigious SESIP Level 5 Security Certification

Posted by Dave Kleidermacher, VP Engineering, Android Security & Privacy Today marks a watershed moment and new benchmark for open-source security and the future of consumer electronics. Google is proud to announce that protected KVM (pKVM), the hypervisor that powers the Android Virtualization Framework, has officially achieved SESIP Level 5 certification .…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
Introducing OSS Rebuild: Open Source, Rebuilt to Last Critical Google Online Security
2025-07-21 Google Online Security

Introducing OSS Rebuild: Open Source, Rebuilt to Last

Posted by Matthew Suozzo, Google Open Source Security Team (GOSST) Today we're excited to announce OSS Rebuild, a new project to strengthen trust in open source package ecosystems by reproducing upstream artifacts. As supply chain attacks continue to target widely-used dependencies, OSS Rebuild gives security teams powerful data to avoid compromise without b…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
Advancing Protection in Chrome on Android Moderate Google Online Security
2025-07-08 Google Online Security

Advancing Protection in Chrome on Android

Posted by David Adrian, Javier Castro & Peter Kotwicz, Chrome Security Team Android recently announced Advanced Protection , which extends Google’s Advanced Protection Program to a device-level security setting for Android users that need heightened security—such as journalists, elected officials, and public figures. Advanced Protection gives you the ability…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
Mitigating prompt injection attacks with a layered defense strategy Important CVE-2025-32711 Google Online Security
2025-06-13 Google Online Security

Mitigating prompt injection attacks with a layered defense strategy

Posted by Adam Gavish, Google GenAI Security Team With the rapid adoption of generative AI, a new wave of threats is emerging across the industry with the aim of manipulating the AI systems themselves. One such emerging attack vector is indirect prompt injections. Unlike direct prompt injections, where an attacker directly inputs malicious commands into a pr…

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.
Project Zero & Cloud Security
Advisory
1 ... 108 109 110
Notification