Security researchers disabled a vulnerable Popcorn Time updater across millions of systems after identifying risks linked to unauthorized remote code execution.
A memory corruption flaw in Google Brotli decoder tracked as CVE 2026 111497 affects Node.js, Bun, Python packages and other software using Brotli compression.
Cybersecurity researchers report a malspam campaign abusing Google DoubleClick redirects to deliver DesckVB RAT via phishing emails, HTML attachments, and multi stage payload delivery.