CVE-2025-55241 2

Vulnerability (CVE)

⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More

Google released Chrome security updates addressing four vulnerabilities, including CVE-2025-10585, a type confusion flaw in the V8 JavaScript and WebAssembly engine that Google says has been exploited in the wild. It is the sixth Chrome zero-day since the...

Zero-Days & Exploits

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

Cyber Risks The Hacker News

A critical token validation failure in Microsoft Entra ID, tracked as CVE-2025-55241 and rated CVSS 10.0, could have let attackers impersonate any user including Global Administrators across any tenant, according to researcher Dirk-jan Mollema, who...

Identity & Access Management