ShadowLeak Exploit Exposed Gmail Data Through ChatGPT Deep Search Agent
Source: https://hackread.com/shadowleak-exploit-exposed-gmail-data-chatgpt-agent/
Google Issues Urgent Chrome 140 Update After Zero-Day Exploited in the Wild
Source: https://www.lansweeper.com/blog/vulnerability/google-issues-urgent-chrome-140-update-after-zero-day-exploited-in-the-wild/?utm_source=reddit&utm_medium=social&utm_campaign=ls-global-vulnerability-2025&utm_content=google-chrome-140
CVE-2025-10585 is a critical zero-day vulnerability in the Google Chrome browser's V8 JavaScript and WebAssembly engine, involving a type confusion flaw. This vulnerability has been actively exploited in the wild in 2025 and was discovered by Google's Threat Analysis Group. It allows attackers to corrupt memory, potentially leading to arbitrary code execution, unauthorized access, or service disruption. Google has released patches in Chrome version 140.0.7339.185/.186 and later to address this and other zero-day vulnerabilities. The vulnerability is part of a series of actively exploited Chrome zero-days in 2025. Immediate patching is strongly recommended to mitigate the risk. The vulnerability poses a critical threat due to its active exploitation and potential impact on user security. There is no detailed public technical information about the exploit methods or affected Chrome versions prior to the patch. No specific countries are confirmed as targeted, though European countries with heavy Chrome usage were noted as at elevated risk.
HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks
Source: https://thehackernews.com/2025/09/hiddengh0st-winos-and-kkrat-exploit-seo.html
