SecurityWeek

Critical Isolated-vm Vulnerability Leads to RCE on Host

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...
The Hacker News

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...
GCN

Google fixes Chrome zero-day CVE-2025-10585

Google has released emergency security patches to address CVE-2025-10585, a high-severity zero-day bug in the V8 JavaScript engine of Chrome that has been actively exploited, the sixth Chrome zero-day ...
Martin Cid Magazine

OpenAI’s hacking AI completes 95% of exploit chains — the standard model does 1.5%

An AI trained to find unpatched vulnerabilities and build working exploit chains is now a commercial product. OpenAI's ...
CSOonline

Google patches third zero-day flaw in Chrome this year

The vulnerability in the Chrome V8 JavaScript engine is rated as high severity and was discovered by Google’s Threat Analysis Group. The Google Chrome team issued an update to fix a high-severity ...