⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More
Summary: Google released Chrome security updates addressing four vulnerabilities, including CVE-2025-10585, a type confusion flaw in the V8 JavaScript and WebAssembly engine that Google says has been exploited in the wild. It is the sixth Chrome zero-day since the start of the year that has been actively exploited or demonstrated as a proof-of-concept.
What you should know: Google disclosed no details on who is exploiting CVE-2025-10585 or at what scale, and it is already the sixth Chrome zero-day of the year - a pace that leaves defenders patching on the attacker's schedule rather than their own.