NewsThe Hacker News
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
More on Windows
Other advisories
- Highosv:MAL-2026-18337Malicious code in @camera.ui/camera-ui-nvr-windows-amd64 (npm)
- Not ratedosv:CLEANSTART-2026-QO42265Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)
- Not ratedosv:CLEANSTART-2026-JH01594On Windows, when the target of Root
- Not ratedosv:CVE-2026-76654Subpath symlinking on Windows nodes permits NTLM coercion
- Not ratedosv:CVE-2026-116576systeminformation: Windows command injection in services() through Unicode quotation marks
- Not ratedosv:CVE-2026-116171SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix
- Not ratedosv:ECHO-096e-d4a5-60b2Windows-only. On Windows an oplock on a soft lock's marker file holds SoftFileLock.acquire() past its timeout and blocks the stale break. The fix (PR #835) is Windows ctypes code. Echo builds and ships this library for Linux only, where the affected code path is not reached.
- Not ratedosv:ECHO-8083-7310-cd1aWindows-only. On Windows ReadWriteLock acts on SQLite side files that another local user places beside its database. The fix (PR #834) is Windows ACL handling. The POSIX side of the same advisory, GHSA-v4x8, is backported in patches/GHSA-v4x8-3wr5-3wq8.patch. Echo builds and ships this library for Linux only.
Other news entries
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution FlawNewsThe Hacker News
- BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsNewsThe Hacker News
- Microsoft: Windows Server 2016 reaches end of support in JanuaryNewsBleepingComputer
- OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSLNewsThe Hacker News
- Decades-Old Windows Utility Powers Modern ClickFix AttackNewsDark Reading
- Microsoft says October updates didn’t actually fix VPN issuesNewsBleepingComputer
- AOMEI Backupper Compromised in Short-Burst Supply Chain CampaignNewsSecurityWeek
- Windows Server 2025 gets support for quick machine recoveryNewsBleepingComputer
Source: https://thehackernews.com/2026/09/four-spy-groups-used-same-chrome-and.html
ID