SparTech Software

Google and Mozilla have released browser updates fixing 219 security flaws, including four critical Chrome bugs and 108 high-risk Firefox issues.

China-linked operators chained critical PHP2Shell flaws with a Linux exploit to root firewalls, plant webshells and breach a US government-affiliated network.

Three GoAhead TLS flaws can accept revoked certificates, bypass chain limits or expose sessions; version 6.1.1 fixes the bugs.

Skyw4lker phishing kit targets U.S. Microsoft 365 users with device-code lures, abusing legitimate authentication to steal access tokens without passwords.

CISA added the Node2Shell Brotli flaw to its KEV catalog after honeypots recorded attack attempts, while Node.js urged users to patch vulnerable runtimes.

Tailscale is racing to fix 11 alleged Tailworm flaws that could let authorized SSH users gain root privileges on affected systems.

Keystone will destroy 18,835 hardware wallets after a stolen authentication key exposed counterfeit-device risks and triggered a shipment freeze.

Attackers are abusing Microsoft Teams external chats to impersonate IT staff, gain remote access and deploy malware in under 15 minutes.

Apple’s iOS 27.2 and macOS Golden Gate 27.2 fix 286 flaws, while iOS 18.7.11 backports an exploited CoreGraphics zero-day.

A researcher claims Samsung TVs may analyze ambient sounds through built-in mics and connected devices, renewing scrutiny of ACR and smart-TV privacy.