⚡ Weekly Recap: Chrome 0-Day, Uni Fi Exploits, macOS Stealers, VPN Flaw and More

Summary: Google released security updates addressing 74 vulnerabilities in Chrome, including CVE-2026-11645, a high-severity (CVSS 8.8) out-of-bounds memory access in the V8 JavaScript and WebAssembly engine that Google says has an exploit in the wild. Google has now addressed five actively exploited Chrome zero-days since the start of the year, the others tracked as CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, and CVE-2026-5281.
Key Takeaway: Five actively exploited Chrome zero-days in a single year means the browser most of your workforce uses is a recurring entry point, and Google withheld specifics on this one until most users could update. The article's own framing is the stake: attackers need old code, weak defaults, and one forgotten box nobody wants to claim.

Read the original at The Hacker News ↗