⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More

Summary: Google released Chrome security updates addressing two high-severity vulnerabilities it said were exploited in the wild: an out-of-bounds write in the Skia 2D graphics library (CVE-2026-3909) and an inappropriate implementation in the V8 JavaScript and WebAssembly engine (CVE-2026-3910) that could lead to out-of-bounds memory access or code execution. The fixes shipped in Chrome versions 146.0.7680.75/76 for Windows and macOS and 146.0.7680.75 for Linux, and Google acknowledged exploits exist for both flaws without sharing further details.
Key Takeaway: Two Chrome zero-days with confirmed in-the-wild exploits mean the browser on nearly every employee desktop is the entry point, and the source notes the window between disclosure and exploitation keeps getting shorter.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2019-17571 CVE-2025-12818 CVE-2025-61915 CVE-2025-65587 CVE-2025-67826 CVE-2026-0231 CVE-2026-0953 CVE-2026-20040 CVE-2026-20046 CVE-2026-21262 CVE-2026-21666 CVE-2026-21667 CVE-2026-21668 CVE-2026-21669 CVE-2026-21671 CVE-2026-21672 CVE-2026-21708 CVE-2026-23813 CVE-2026-2413 CVE-2026-24308 CVE-2026-25921 CVE-2026-26123 CVE-2026-26127 CVE-2026-26224 CVE-2026-26225 CVE-2026-27493 CVE-2026-27495 CVE-2026-27497 CVE-2026-27577 CVE-2026-27685 CVE-2026-27944 CVE-2026-2833 CVE-2026-2835 CVE-2026-2836 CVE-2026-29000 CVE-2026-3059 CVE-2026-3060 CVE-2026-3102 CVE-2026-3497 CVE-2026-3909 CVE-2026-3910 CVE-2026-3913 CVE-2026-3989
Related: Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices Cyber Risks ·
Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days Cyber Risks ·
Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials Cyber Risks ·