Critical Chrome 0-Day Vulnerability Actively Exploited in the Wild

Critical Chrome 0-Day Vulnerability Actively Exploited in the Wild

Google has released an emergency Chrome security update that fixes a critical zero-day vulnerability already being exploited in real-world attacks. The flaw, tracked as CVE-2026-85046, affects the V8 JavaScript and WebAssembly engine used by Chrome to process web content. The company confirmed that it is aware of an exploit for the vulnerability existing in the…

When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps

When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps

In this article AI and agentic application deployments on cloud-native platforms are increasing, and they often prioritize speed over secure configuration. Our observations from aggregated and anonymized Microsoft Defender for Cloud signals showed cases where AI services were publicly exposed with weak or missing authentication, creating exploitable misconfigurations that attackers actively abused. These issues enabled…

46 Vulnerability Statistics 2026: Key Trends in Discovery, Exploitation, and Risk

46 Vulnerability Statistics 2026: Key Trends in Discovery, Exploitation, and Risk

Vulnerabilities remain one of the most exploited entry points for cyberattacks. According to the Indusface State of Application Security Report 2026, attacks targeting website vulnerabilities reached 6.29 billion in 2025, up from 4 billion in 2024, a 56% year-over-year increase. That number is not just a trend line. It means attackers are finding, weaponizing, and…