{"metadata": {"vulnerability": "CVE-2026-87491", "count": 144, "kinds": {"milestone": 14, "sighting": 83, "kev": 11, "other": 36}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0354", "record": "NCSC-2026-0354", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": true, "value": "2026-09-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1139", "record": "CERTFR-2026-AVI-1139", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-09-08T22:38:36.226Z", "date_only": false, "value": "2026-09-08T22:38:36.226Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-87491", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "timestamps.asserted_at", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": true, "value": "2026-09-09", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-87491", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": true, "value": "2026-09-09", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "evidence.0.details.date_added", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "timestamps.first_seen_at", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1139", "record": "CERTFR-2026-AVI-1139", "field": "last_revision_date"}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1139", "record": "CERTFR-2026-AVI-1139", "field": "initial_release_date"}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1139", "record": "CERTFR-2026-AVI-1139", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "status.status_updated_at", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T00:09:38.419Z", "date_only": false, "value": "2026-09-09T00:09:38.419Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-87491", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-09T00:09:38.419Z", "date_only": false, "value": "2026-09-09T00:09:38.419Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2026-87491", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-09T00:17:22.245Z", "date_only": false, "value": "2026-09-09T00:17:22.245186Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2b57rson2t", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9d9df07f-b801-4a52-9803-e415e08c1514", "content": "Google patched a Chrome zero-day, CVE-2026-87491, exploited in the wild. Chrome 153 fixes 230 flaws including critical WebGL bugs. Update now.\n\n#Chrome #ZeroDay #Google #CyberSecurity #CVE #V8 #BrowserSecurity #Infosec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2b57rson2t"}, {"timestamp": "2026-09-09T00:34:06.604Z", "date_only": false, "value": "2026-09-09T00:34:06.604349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mv2c2kmmg25i", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "4137000c-0fef-4c7f-99d6-b54cccbf4778", "content": "\u30bc\u30ed\u30c7\u30a4\u3042\u308a > \"Google is aware that an exploit for CVE-2026-87491 exists in the wild.\"", "url": "https://bsky.app/profile/shiojiri.com/post/3mv2c2kmmg25i"}, {"timestamp": "2026-09-09T01:05:50.532Z", "date_only": false, "value": "2026-09-09T01:05:50.532569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv2dtu3cuo2r", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "d19f999c-150a-4207-abd3-477537c52916", "content": "Chrome Bleeds Again. Everyone Pretends Browser Patches Are Optional\nPANIC 78% | Lag 0.0h | Google has patched a Chrome zero-day, CVE-2026-87491, reportedly exploited in the wild. Chrome 153 a\n#AfterShockIndex\nREAD MORE", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv2dtu3cuo2r"}, {"timestamp": "2026-09-09T01:17:05Z", "date_only": false, "value": "2026-09-09T01:17:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8X3P-8G9V-XC7M", "record": "GHSA-8X3P-8G9V-XC7M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-09T01:17:05.887Z", "date_only": false, "value": "2026-09-09T01:17:05.887", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87491", "record": "FKIE_CVE-2026-87491", "field": "published"}, {"timestamp": "2026-09-09T03:30:39Z", "date_only": false, "value": "2026-09-09T03:30:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8X3P-8G9V-XC7M", "record": "GHSA-8X3P-8G9V-XC7M", "field": "published"}, {"timestamp": "2026-09-09T08:00:59Z", "date_only": false, "value": "2026-09-09T08:00:59+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-87491", "field": "timestamps.asserted_at", "uuid": "2185e47b-f812-47b3-bbdf-ece52ef1e638", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T08:00:59Z", "date_only": false, "value": "2026-09-09T08:00:59.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-87491", "field": "evidence.0.details.added_date", "uuid": "2185e47b-f812-47b3-bbdf-ece52ef1e638", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T08:00:59Z", "date_only": false, "value": "2026-09-09T08:00:59+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-87491", "field": "timestamps.first_seen_at", "uuid": "2185e47b-f812-47b3-bbdf-ece52ef1e638", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T08:00:59Z", "date_only": false, "value": "2026-09-09T08:00:59+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-87491", "field": "status.status_updated_at", "uuid": "2185e47b-f812-47b3-bbdf-ece52ef1e638", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T08:10:02.736Z", "date_only": false, "value": "2026-09-09T08:10:02.736745Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mv33kdt7uc2s", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "ce503a97-e3d2-4124-b200-994d2f30107d", "content": "Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/09/09/g...\n\n#Chrome #exploit #cybersecurity", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3mv33kdt7uc2s"}, {"timestamp": "2026-09-09T08:23:59.524Z", "date_only": false, "value": "2026-09-09T08:23:59.524970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mv34dcutfk2k", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "8dc0b0d0-2377-4778-900e-c9fee246cbcb", "content": "Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)\n\nwww.helpnetsecurity.com/2026/09/09/g...\n\n#Cybersecurity #Cyber #SituationalAwareness", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mv34dcutfk2k"}, {"timestamp": "2026-09-09T09:09:33.663Z", "date_only": false, "value": "2026-09-09T09:09:33.663372Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deskmodder.de/post/3mv36utvm222g", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "84276845-55b3-4785-86ab-6154f14ecfdf", "content": "Google Chrome 153 (153.0.8010.36/.37) korrigiert 230 Sicherheitsl\u00fccken - CVE-2026-87491 in der freien Wildbahn", "url": "https://bsky.app/profile/deskmodder.de/post/3mv36utvm222g"}, {"timestamp": "2026-09-09T09:25:44.769Z", "date_only": false, "value": "2026-09-09T09:25:44.769466Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv37r4imi52v", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "52affb79-4ed1-40d5-9cfa-cc0d7772079e", "content": "Google patched 230 security vulnerabilities in Chrome, including CVE-2026-87491, an actively exploited V8 out-of-bounds bug enabling sandbox escape and arbitrary code execution.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv37r4imi52v"}, {"timestamp": "2026-09-09T09:43:39.015Z", "date_only": false, "value": "2026-09-09T09:43:39.015429Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0354", "record": "NCSC-2026-0354", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-09T09:43:39.015Z", "date_only": false, "value": "2026-09-09T09:43:39.015429Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0354", "record": "NCSC-2026-0354", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-09T09:43:39.015Z", "date_only": false, "value": "2026-09-09T09:43:39.015429Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0354", "record": "NCSC-2026-0354", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-09T09:53:45.364Z", "date_only": false, "value": "2026-09-09T09:53:45.364173Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv3bdulshr2g", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "bdd5f06d-96f4-4bf3-919a-f019978959a8", "content": "Chrome 153 stable patches 230 vulnerabilities, including exploited zero-day CVE-2026-87491, and addresses multiple critical and high-severity issues across V8, WebGL, and Cast.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv3bdulshr2g"}, {"timestamp": "2026-09-09T10:02:57.527Z", "date_only": false, "value": "2026-09-09T10:02:57.527872Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0354", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "dd7b28e8-635f-41d9-8673-95e5ba853dfd", "content": "Google heeft een zeroday-kwetsbaarheid verholpen in de V8 JavaScript engine van Google Chrome. Google meldt dat de kwetsbaarheid met kenmerk CVE-2026-87491 actief wordt misbruikt. Het betreft een out-of-bounds write in de V8-engine van Google Chrome, die voorkomt in versies v\u00f3\u00f3r 153.0.8010.36. Een kwaadwillende kan een speciaal vervaardigde HTML-pagina gebruiken om de kwetsbaarheid te activeren en binnen de sandbox willekeurige code uit te voeren. De kwetsbaarheid wordt veroorzaakt door onjuiste bounds checking in het geheugenbeheer van V8, wat kan leiden tot geheugenbeschadiging. Succesvol misbruik kan daarnaast leiden tot toegang tot gegevens buiten de toegewezen geheugenbuffer, waardoor gevoelige informatie kan worden buitgemaakt of de browser kan crashen.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0354"}, {"timestamp": "2026-09-09T11:09:45.831Z", "date_only": false, "value": "2026-09-09T11:09:45.831424Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv3flromy327", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9ae8b418-2f86-41d6-8ca7-e3a098555f8f", "content": "Update Chrome now: CVE-2026-87491, a V8 out-of-bounds write, is exploited in the wild. Patch to 153.0.8010.36/.37 (Windows/macOS) or .36 (Linux) and relaunch. https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv3flromy327"}, {"timestamp": "2026-09-09T11:10:29.372Z", "date_only": false, "value": "2026-09-09T11:10:29.372970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mv3fn3eyin2e", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "8ac38269-5743-4207-80d3-e8ce6d3f1db9", "content": "Chrome V8\u306e\u8106\u5f31\u6027(CVE-2026-87491)\u304c\u5b9f\u4e16\u754c\u3067\u60aa\u7528\u3055\u308c\u3001\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u5185\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3002Google\u306f\u4fee\u6b63\u6e08\u307f\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mv3fn3eyin2e"}, {"timestamp": "2026-09-09T12:00:04.406Z", "date_only": false, "value": "2026-09-09T12:00:04.406970Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerNewscyber/3431", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "686acb30-342a-4d96-8657-0147aa947e8b", "content": "\u2708  \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u06a9\u0631\u0648\u0645 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u062f\u0631 \u0645\u0648\u062a\u0648\u0631 V8 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0631\u0648\u0645 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-87491 \u0631\u0627 \u06a9\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u060c \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06cc\u06a9 \u0635\u0641\u062d\u0647 \u0627\u0686\u200c\u062a\u06cc\u200c\u0627\u0645\u200c\u0627\u0644 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u0627\u06cc\u0632\u0648\u0644\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u06a9\u0631\u0648\u0645\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648 \u06f2\u06f3\u06f0 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631 \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0631\u0627 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "url": "https://t.me/HackerNewscyber/3431"}, {"timestamp": "2026-09-09T12:00:04.495Z", "date_only": false, "value": "2026-09-09T12:00:04.495950Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10010", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "b8498a27-6cf6-4547-bfec-ac13cfb527a4", "content": "\u26a0\ufe0f ALERT - Google patched a new actively exploited Chrome V8 zero-day.\n\nCVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome\u2019s sandbox. Google has not said how it\u2019s being weaponized or who is behind it.\n\nRead: https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "url": "https://t.me/thehackernews/10010"}, {"timestamp": "2026-09-09T12:15:13.617Z", "date_only": false, "value": "2026-09-09T12:15:13.617229Z", "kind": "sighting", "label": "Seen", "source": "https://www.ncsc.nl/alerts/actief-misbruik-zero-day-kwetsbaarheid-in-google-chrome-v8-update-nu", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "8556fb80-6e60-41c2-969b-9ce3b125188f", "url": "https://www.ncsc.nl/alerts/actief-misbruik-zero-day-kwetsbaarheid-in-google-chrome-v8-update-nu"}, {"timestamp": "2026-09-09T12:46:30.428Z", "date_only": false, "value": "2026-09-09T12:46:30.428369Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117241150833718533", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "e9a24857-f6cd-4ee3-89ed-67db5f847c3b", "content": "The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine. https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "url": "https://infosec.exchange/users/jbhall56/statuses/117241150833718533"}, {"timestamp": "2026-09-09T12:46:39.368Z", "date_only": false, "value": "2026-09-09T12:46:39.368472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mv3kyzdopk2j", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9b487392-3741-4c7b-9ba5-724145886a53", "content": "The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine. thehackernews.com/2026/09/chro...", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mv3kyzdopk2j"}, {"timestamp": "2026-09-09T13:03:19.127Z", "date_only": false, "value": "2026-09-09T13:03:19.127113Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "adb57b4d-93ea-47d2-b9af-816d8e9f906c", "content": "Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild.\n\nThe medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine.\n\n\"Out-of-bounds write in V8 in Google Chrome prior to", "url": "https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html"}, {"timestamp": "2026-09-09T13:03:58.150Z", "date_only": false, "value": "2026-09-09T13:03:58.150244Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mv3lxxxwsq25", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "622c465f-2770-4a21-af19-b3ee82a71bf3", "content": "Google patched a second actively exploited Chrome zero-day in under a week. CVE-2026-87491 is an out-of-bounds write in V8, and Google says an exploit exists in the wild. Fixed in Chrome 153.0.8010.36, one of 230 security fixes in the release. bleepingcomputer.com/new...", "url": "https://bsky.app/profile/entorisec.bsky.social/post/3mv3lxxxwsq25"}, {"timestamp": "2026-09-09T13:26:00.298Z", "date_only": false, "value": "2026-09-09T13:26:00.298616Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117241101321399242", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "044bc5e2-bd5a-4c58-91d3-6cda9173ada1", "content": "Google Chrome #zeroday \n\nGoogle is aware that an exploit for CVE-2026-87491 exists in the wild.\nhttps://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html\n#Google #Chrome #CVE", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117241101321399242"}, {"timestamp": "2026-09-09T14:47:47.420Z", "date_only": false, "value": "2026-09-09T14:47:47.420304Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mv3rrm6dxi26", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "f0d796d7-03ea-4be1-bc12-348817ada0a3", "content": "Google has released Chrome 153, addressing 230 vulnerabilities, including CVE-2026-87491, a Medium-severity 0-day exploited in the wild. This update includes five Critical vulnerabilities and 43 High-severity bugs across various components.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mv3rrm6dxi26"}, {"timestamp": "2026-09-09T16:00:07.057Z", "date_only": false, "value": "2026-09-09T16:00:07.057991Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/Ju-HZh_HlqYldT-jVZcIoKt0JH9EUFfUXnq5AO9xtmN-xA", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "04fe8ee7-b5f0-4e26-bbf5-169d95a0cc68"}, {"timestamp": "2026-09-09T16:18:44.286Z", "date_only": false, "value": "2026-09-09T16:18:44.286858Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mv3wub4ril2h", "record": "cve-2026-87491", "field": "creation_timestamp", "uuid": "5f079ddb-8ee6-4521-87d5-327f1906632d", "content": "\ud83d\udcf0 Google Peringatkan Chrome Zero-Day Baru yang Telah Dieksploitasi dalam Serangan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/09/google-chrome-zero-day-cve-2026-87491/\n\n#cybersecurity #google #googleChrome #keamanan #keamananSiber #teknologi #vulnerability #zero-day", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mv3wub4ril2h"}, {"timestamp": "2026-09-09T17:15:21.668Z", "date_only": false, "value": "2026-09-09T17:15:21.668593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv3zzeqhym2q", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "8d654f4b-09d8-417b-9f62-1c5e060099c8", "content": "\ud83e\udd16 CVE-2026-87491: out-of-bounds write in Chrome's V8 engine, exploited in the wild, enables code execution inside the sandbox. Patched in Google's latest update \u2014 update now.\n\nhttps://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mv3zzeqhym2q"}, {"timestamp": "2026-09-09T17:21:46.066Z", "date_only": false, "value": "2026-09-09T17:21:46.066074Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv42eybbcs2d", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "bb070f2a-1741-48e1-b760-05b847dc830e", "content": "Just another Tuesday in IT, as Google casually drops Chrome version 153 to fix a staggering 230 security flaws. Desktop browser users are the lucky targets here, suffering through an actively exploited V8 engine out-of-bounds write flaw tracked as CVE-2026-87491. Shielding our wo...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv42eybbcs2d"}, {"timestamp": "2026-09-09T17:44:03.796Z", "date_only": false, "value": "2026-09-09T17:44:03.796149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/volexity.com/post/3mv43lqpz222h", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "1959de2b-febc-45ab-bca8-0df4a0423539", "content": "Earlier this month, Volexity detected multiple Chinese threat actors launching attacks against its customers using chained 0-day exploits in Google Chrome (CVE-2026-85046 & CVE-2026-87491) and Microsoft Windows (CVE-2026-85880). \n\u00a0\n#DFIR #threatintel", "url": "https://bsky.app/profile/volexity.com/post/3mv43lqpz222h"}, {"timestamp": "2026-09-09T17:44:07.726Z", "date_only": false, "value": "2026-09-09T17:44:07.726973Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/volexity/statuses/117242320027691801", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "5f1307e1-6262-4bce-9174-d17171324c08", "content": "Earlier this month, @volexity detected multiple Chinese threat actors launching attacks against its customers using chained 0-day exploits in Google Chrome (CVE-2026-85046 & CVE-2026-87491) and Microsoft Windows (CVE-2026-85880). Volexity observed threat actors it tracks as UTA0560 and JungleBamboo using variations of the same exploits to deliver different malware implants. These implants ranged from a JScript backdoor (GRIMWEDGE) to a fake Google Gemini Chrome extension (LONGTALE).\nRead the full analysis of the exploit chain and post-exploitation tradecraft here: https://www.volexity.com/blog/2026/09/09/mind-the-patch-gap-multiple-chinese-threat-actors-chain-0-day-exploits-in-chrome-windows/ #DFIR #threatintel", "url": "https://infosec.exchange/users/volexity/statuses/117242320027691801"}, {"timestamp": "2026-09-09T18:00:43.771Z", "date_only": false, "value": "2026-09-09T18:00:43.771642Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mv44knqoey2x", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "0afa2b8f-0cb7-409e-be61-779535898aaf", "content": "Chrome 153, falla zero-day gi\u00e0 sfruttata: bisogna aggiornare subito\nGoogle corregge CVE-2026-87491 in Chrome 153: lo zero-day colpisce V8 ed \u00e8 gi\u00e0 sfruttato in attacchi real...\nhttps://www.ilsoftware.it/chrome-153-chiude-zero-day-usato-negli-attacchi/", "url": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mv44knqoey2x"}, {"timestamp": "2026-09-09T19:46:44.787Z", "date_only": false, "value": "2026-09-09T19:46:44.787538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv4ciad6er2z", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "a53a4595-f8cf-4907-b677-52b03b652396", "content": "\ud83d\uded1 CVE-2026-87491\nGoogle Chromium V8\nCVSS 8.8 / EPSS 0% / KEV \u2705\nTL;DR: Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacke\u2026\nhttps://cvesentinel.com/report/CVE-2026-87491?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv4ciad6er2z"}, {"timestamp": "2026-09-09T20:00:01Z", "date_only": false, "value": "2026-09-09T20:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "timestamps.recorded_at", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T20:00:04.055Z", "date_only": false, "value": "2026-09-09T20:00:04.055819Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a37c372-acc3-4022-9d5f-11bdf31cccbc", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "adc5f166-5663-4791-a047-81fe137b8aec", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a37c372-acc3-4022-9d5f-11bdf31cccbc"}, {"timestamp": "2026-09-09T20:03:03.968Z", "date_only": false, "value": "2026-09-09T20:03:03.968947Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/e8546fe463f1a1319bf313dd9ed691b9", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "022ffa96-6be2-4701-a0e5-58bdbed78e8b", "content": "**September 9, 2026 Cyber Threat Intelligence Summary**\n\nThis briefing highlights multiple critical vulnerabilities with active exploitation, state-sponsored espionage activity, and a major data breach:\n\n* **Actively Exploited Vulnerabilities:** Google Chrome (CVE-2026-87491), ConnectWise ScreenConnect (CVE-2026-84869), and N-able N-central (CVE-2026-86218/86207) are confirmed active in the wild. Chrome and N-able are now listed on CISA\u2019s KEV database. Immediate updates are strongly advised.\n* **Critical & High-Risk Flaws:** Check Point gateways face authentication bypass and RCE; SkillTree has a critical (9.6) stored XSS enabling admin takeover; Fast-DDS suffers a critical out-of-bounds read risking heap memory disclosure and ASLR bypass; Ansible\u2019s memcached plugin allows RCE via insecure deserialization.\n* **Espionage Activity:** The undocumented BlueMoon exploit kit, chaining Chrome and Windows vulnerabilities, is actively deployed by multiple espionage groups, with initial attribution to China-aligned APT31.\n* **Data Breach:** The FBI is investigating the dark web sale of 153 million driver\u2019s license records.\n* **Other Advisories:** MISP requires an immediate patch to fix a sharing group authorization flaw.\n\n**Recommendation:** Prioritize patching Chrome, ConnectWise, N-able, and Check Point systems, remediate exposed critical flaws, and enhance detection for BlueMoon/APT31 activity.", "url": "https://gist.github.com/ichintu/e8546fe463f1a1319bf313dd9ed691b9"}, {"timestamp": "2026-09-09T20:06:36.682Z", "date_only": false, "value": "2026-09-09T20:06:36.682612Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv4dlq7rg52g", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "443aa634-ca1c-4b99-9a33-4b88b7a801d8", "content": "~Cisa~\nCISA added four actively exploited Fortinet, Citrix, Chromium, and Cisco vulnerabilities to its KEV Catalog.\n-\nIOCs: CVE-2025-25249, CVE-2026-19490, CVE-2026-87491\n-\n#CVE #Cybersecurity #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mv4dlq7rg52g"}, {"timestamp": "2026-09-09T20:15:11.493Z", "date_only": false, "value": "2026-09-09T20:15:11.493011Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-904", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "12ca1094-81a0-4897-8aa1-a7da4056bc18", "url": "https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-904"}, {"timestamp": "2026-09-09T21:31:35Z", "date_only": false, "value": "2026-09-09T21:31:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8X3P-8G9V-XC7M", "record": "GHSA-8X3P-8G9V-XC7M", "field": "modified"}, {"timestamp": "2026-09-09T22:36:34.296Z", "date_only": false, "value": "2026-09-09T22:36:34.296587Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/csirts.com/post/3mv4lxv5yxx2i", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "0dc3f8ac-4390-468f-9d6e-687658375a41", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-87491", "url": "https://bsky.app/profile/csirts.com/post/3mv4lxv5yxx2i"}, {"timestamp": "2026-09-10T00:00:41.014Z", "date_only": false, "value": "2026-09-10T00:00:41.014465Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/10010", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "3581d42d-c99c-47d1-8d7b-6d0b2cf0cd05", "content": "\u26a0\ufe0f ALERT - Google patched a new actively exploited Chrome V8 zero-day.\n\nCVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome\u2019s sandbox. Google has not said how it\u2019s being weaponized or who is behind it.\n\nRead: https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "url": "https://t.me/thehackernews/10010"}, {"timestamp": "2026-09-10T00:00:41.094Z", "date_only": false, "value": "2026-09-10T00:00:41.094403Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackerNewscyber/3431", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "b9b62d42-f6cc-4e4b-8114-0acf56861390", "content": "\u2708  \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u06a9\u0631\u0648\u0645 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u062f\u0631 \u0645\u0648\u062a\u0648\u0631 V8 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0631\u0648\u0645 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-87491 \u0631\u0627 \u06a9\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u060c \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06cc\u06a9 \u0635\u0641\u062d\u0647 \u0627\u0686\u200c\u062a\u06cc\u200c\u0627\u0645\u200c\u0627\u0644 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u0627\u06cc\u0632\u0648\u0644\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u06a9\u0631\u0648\u0645\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648 \u06f2\u06f3\u06f0 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631 \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0631\u0627 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "url": "https://t.me/HackerNewscyber/3431"}, {"timestamp": "2026-09-10T00:18:20.739Z", "date_only": false, "value": "2026-09-10T00:18:20.739842Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mv4rnv62hr2v", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "4193c463-eb53-4e32-8cb0-b98bf465406e", "content": "CVE-2026-87491 is trending. Hype score 9, currently #6 on cvemon.\n\nOut of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-87491", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mv4rnv62hr2v"}, {"timestamp": "2026-09-10T02:07:07.758Z", "date_only": false, "value": "2026-09-10T02:07:07.758677Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv4xqfb77d2p", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "0ee3f11b-eceb-46f2-9820-2e02423beebf", "content": "\ud83d\udccc CVE-2026-87491 - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted... https://www.cyberhub.blog/cves/CVE-2026-87491", "url": "https://bsky.app/profile/cyberhub.blog/post/3mv4xqfb77d2p"}, {"timestamp": "2026-09-10T02:39:38.237Z", "date_only": false, "value": "2026-09-10T02:39:38.237708Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv4zkjharf2p", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "64c19f82-8125-4891-8914-569f700efe38", "content": "CVE-2026-87491: Chrome V8 Zero-Day Exploited in the Wild Enables Arbitrary Code Execution\n\n", "url": "https://bsky.app/profile/arc-codex.com/post/3mv4zkjharf2p"}, {"timestamp": "2026-09-10T03:55:21.039Z", "date_only": false, "value": "2026-09-10T03:55:21.039385Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-87491", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-09-10T03:55:21.039Z", "date_only": false, "value": "2026-09-10T03:55:21.039385Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87491", "record": "FKIE_CVE-2026-87491", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-10T04:46:09.669Z", "date_only": false, "value": "2026-09-10T04:46:09.669606Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "a32bcc8b-2294-4e4c-8930-1dbfe05a0c8f", "url": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910"}, {"timestamp": "2026-09-10T06:03:48.484Z", "date_only": false, "value": "2026-09-10T06:03:48.484091Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv5exmpfnv2p", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "1e9b0e06-52c2-4d48-b45f-060f1b31b4ed", "content": "\ud83d\udee1\ufe0f Revue cyber du 10 septembre :\n\ud83d\udd34 Cisco FMC : auth bypass CVE-2026-20079 exploit\u00e9\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/\n\ud83d\udfe0 Chrome : 7e zero-day 2026 (CVE-2026-87491)\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1139/", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv5exmpfnv2p"}, {"timestamp": "2026-09-10T06:25:08.471Z", "date_only": false, "value": "2026-09-10T06:25:08.471953Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mv5g5qh6gs25", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "0e5e9b46-030b-4319-9770-8a6d63e6dc64", "content": "Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)\n\nGoogle has fixed 230 vulnerabilities in Chrome, including a zero-day flaw, CVE-2026-87491, with an in-the-wild exploit. \u201cGoogle is aware that an exploit for CVE-2026-87491 exists in the wild,\u201d the compan\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mv5g5qh6gs25"}, {"timestamp": "2026-09-10T06:36:53.381Z", "date_only": false, "value": "2026-09-10T06:36:53.381474Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mv5gsr2q6j27", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "d2e67184-9abf-4563-b2e2-600470994ec8", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 44 interactions\nCVE-2026-85880: 21 interactions\nCVE-2026-44756: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85880: 20 interactions\nCVE-2026-85046: 17 interactions\nCVE-2026-87491: 16 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mv5gsr2q6j27"}, {"timestamp": "2026-09-10T08:17:59Z", "date_only": false, "value": "2026-09-10T08:17:59+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-87491", "field": "timestamps.recorded_at", "uuid": "2185e47b-f812-47b3-bbdf-ece52ef1e638", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T08:18:27.953Z", "date_only": false, "value": "2026-09-10T08:18:27.953766Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2185e47b-f812-47b3-bbdf-ece52ef1e638", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "f3e19866-c012-4fa7-a828-faf13923d33c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2185e47b-f812-47b3-bbdf-ece52ef1e638"}, {"timestamp": "2026-09-10T10:25:56.873Z", "date_only": false, "value": "2026-09-10T10:25:56.873355Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mv5tlljfyayx", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "af74cc40-5b1d-4849-97f1-4b948a94e2a0", "content": "CISA added Chrome V8 CVE-2026-87491 to its Known Exploited Vulnerabilities catalog. CISA says the exploited out-of-bounds write can allow code execution inside the sandbox via a crafted HTML page. The Hacker News reports Google released Chrome updates addressing it.", "url": "https://bsky.app/profile/shortinfo.bsky.social/post/3mv5tlljfyayx"}, {"timestamp": "2026-09-10T11:31:41.485Z", "date_only": false, "value": "2026-09-10T11:31:41.485680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mv5xbvi62s2e", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9b3372d2-ffa3-457a-bfe9-9bdcf72001cb", "content": "\u3010\u7dca\u6025\u3011Google Chrome \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-87491 / CVSS 8.8\uff09\n\n\u7d30\u5de5\u3057\u305f\u30da\u30fc\u30b8\u3092\u958b\u304f\u3060\u3051\u3067\u3001V8\u306e\u5883\u754c\u5916\u66f8\u304d\u8fbc\u307f\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u307e\u3059\u3002\u60aa\u7528\u304c\u5b9f\u5728\u3059\u308b\u3068Google\u304c\u516c\u8868\u3002\n\u5bfe\u51e6: chrome://settings/help \u3092\u958b\u3044\u3066\u66f4\u65b0\u3057\u3001\u518d\u8d77\u52d5\u3002\n\nforsmile.jp/articles/chr...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "url": "https://bsky.app/profile/forsmile.jp/post/3mv5xbvi62s2e"}, {"timestamp": "2026-09-10T15:10:22.496Z", "date_only": false, "value": "2026-09-10T15:10:22.496589Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv6dixfw3z24", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "cd37be4a-21a1-4d22-b6df-70cba2ca46ab", "content": "Chrome zero-day CVE-2026-87491, chained with Windows CVE-2026-85880 by spy groups. Update Chrome to 153.0.8010.36+ and apply September updates. https://bleepingcomputer.com/news/security/new-bluemoon-kit-exploited-windows-and-chrome-zero-day-flaws", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv6dixfw3z24"}, {"timestamp": "2026-09-10T16:45:02.504Z", "date_only": false, "value": "2026-09-10T16:45:02.504533Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.hr/google-je-izdao-zakrpe-za-230-ranjivosti-azurirajte-chrome-preglednik", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "00f5cd07-65c6-4579-a979-f78a3b954dc6", "url": "https://www.cert.hr/google-je-izdao-zakrpe-za-230-ranjivosti-azurirajte-chrome-preglednik"}, {"timestamp": "2026-09-10T19:00:04.914Z", "date_only": false, "value": "2026-09-10T19:00:04.914416Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/20036", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "284cc4c1-8166-4c2c-854b-b8c1394e1090", "content": "\u0412 Google Chrome \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 230 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0443\u044e\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 (CVE-2026-87491). \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\nhttps://xakep.ru/2026/09/10/chrome-7th-0day/", "url": "https://t.me/xakep_ru/20036"}, {"timestamp": "2026-09-10T20:15:48.562Z", "date_only": false, "value": "2026-09-10T20:15:48.562532Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv6ul4agqs27", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "cc5485d4-0722-4354-b2ed-4c0ddd751983", "content": "@proofpoint.com\nFour espionage actors rapidly adopted a Chrome/Windows zero-day exploit chain.\n-\nIOCs: CVE-2026-85046, CVE-2026-87491, ms[.]checrity[.]com\n-\n#APT #ThreatIntel #ZeroDay", "url": "https://bsky.app/profile/cyfar.ca/post/3mv6ul4agqs27"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": true, "value": "2026-09-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1171", "record": "CERTFR-2026-AVI-1171", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-11T00:00:29.474Z", "date_only": false, "value": "2026-09-11T00:00:29.474113Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/20036", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "90b00415-99a0-4d1c-a8ec-83420211dbc2", "content": "\u0412 Google Chrome \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 230 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0443\u044e\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 (CVE-2026-87491). \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\nhttps://xakep.ru/2026/09/10/chrome-7th-0day/", "url": "https://t.me/xakep_ru/20036"}, {"timestamp": "2026-09-11T01:00:03.631Z", "date_only": false, "value": "2026-09-11T01:00:03.631753Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/2887", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "38b8f18d-7560-4d92-98ca-df1f97aa5ec5", "content": "Google patched a new actively exploited Chrome V8 zero-day.\n\nCVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome\u2019s sandbox. Google has not said how it\u2019s being weaponized or who is behind it.", "url": "https://t.me/CyberDispatch/2887"}, {"timestamp": "2026-09-11T05:02:08.453Z", "date_only": false, "value": "2026-09-11T05:02:08.453405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv7rybixbc2h", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "34174f38-b40f-48af-a9c0-202e51f1f830", "content": "Daily IT Security Digest \u2014 2026-09-11\nproducts.\n\nSources: Bluesky search results (hackread.bsky.social)\n\n---\n\n## 2. Google Chrome 153: 230 Vulnerabilities Fixed, Including Actively Exploited V8 Zero-Day\nGoogle released Chrome 153 fixing 230 vulnerabilities, including CVE-2026-87491 \u2014 a V8 engine", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mv7rybixbc2h"}, {"timestamp": "2026-09-11T06:29:43.914Z", "date_only": false, "value": "2026-09-11T06:29:43.914923Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7wupmxpk2n", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "fcfb3dd7-0df6-4ca0-a6b3-da34bdd5aca0", "content": "\ud83d\udd34 Chrome zero-day exploited in the wild\n\nCVE-2026-87491 is an out-of-bounds write in V8 that can lead to code execution. It's already the 7th exploited Chrome zero-day of 2026. Update to Chrome 153.\n\nstemshop.top/blog/chrome-...\n\n#CVE #CVE202687491 #Chrome #ZeroDay #V8 #CyberSecurity", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7wupmxpk2n"}, {"timestamp": "2026-09-11T06:30:38.047Z", "date_only": false, "value": "2026-09-11T06:30:38.047866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv7wwjf54m2g", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "2bd1b084-50ea-407e-81b5-a6063e6e3f00", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-87491: \u26a0\ufe0f CVE-2026-87491: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.8%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-87491-out-of-bounds-write-in-v8", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv7wwjf54m2g"}, {"timestamp": "2026-09-11T10:00:04.908Z", "date_only": false, "value": "2026-09-11T10:00:04.908409Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8598", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "92657f5b-7c16-4d3f-9a2f-e20812a3b810", "content": "\u0421\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 APT-\u0433\u0440\u0443\u043f\u043f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Chrome, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f Proofpoint \u0438 Volexity, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Chrome \u0438 Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0436\u0435\u0440\u0442\u0432\u0430 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u0442 \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.\n\nProofpoint \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u0430\u043a BlueMoon\u00a0\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 TA412, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a JungleBamboo, APT31 \u0438 Violet Typhoon, 28 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u043d\u0435\u0439, \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435, \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0442\u0443 \u0436\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0428\u0410 \u0438 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438.\n\nVolexity \u0432 \u0445\u043e\u0434\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u044f\u0441\u043d\u0438\u0432, \u0447\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0430, UTA0560, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0442\u043e\u0442 \u0436\u0435 \u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Chrome, CVE-2026-85046, \u0443\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 Chromium, \u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0435\u0449\u0435 \u043d\u0435 \u043f\u043e\u043f\u0430\u043b\u043e \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u0430\u043d\u0430\u043b \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Chrome.\n\n\u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c\u00bb: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u043a\u0430\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442, \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Chrome \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0435 \u0438\u043c\u0435\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 V8, \u0434\u0432\u0438\u0436\u043e\u043a JavaScript \u0432 Chrome, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0417\u0430\u0442\u0435\u043c \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b V8, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Volexity \u043a\u0430\u043a CVE-2026-87491, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-85880.\n\n\u0412 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c\u0443 \u0432\u043e \u0432\u043a\u043b\u0430\u0434\u043a\u0435 Chrome, \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows.\n\n\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 Windows \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0435\u0451 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 Windows, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 Windows 10, Windows Server 2019 \u0438 2022, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 Windows 11 21H2.\n\nProofpoint \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e BlueMoon \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430, \u0430\u0434\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0433\u043e\u0440\u043d\u043e\u0434\u043e\u0431\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0438 \u0442\u043e\u0440\u0433\u043e\u0432\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c \u0444\u0438\u0440\u043c\u0430\u043c \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c.\n\n\u0412 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u0430\u043b\u0430\u0441\u044c. TA412 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043f\u043e\u0434 Google Gemini, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 Proofpoint \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 GemStone, \u0430 Volexity \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a LONGTALE.\n\n\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448, \u043a\u0440\u0430\u0441\u0442\u044c \u0444\u0430\u0439\u043b\u044b cookie \u0438 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043d\u0438\u043c\u043a\u0438 \u044d\u043a\u0440\u0430\u043d\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0441\u0432\u043e\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u0412 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0442\u0430 \u0436\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 ShadowPad, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 GRIMWEDGE \u043d\u0430 JScript \u043e\u0442 Volexity.\n\nProofpoint \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0447\u0442\u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 BlueMoon \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c, \u0430 \u043d\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043a\u0430\u0436\u0434\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418, \u0445\u043e\u0442\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043d\u0435\u0442.", "url": "https://t.me/true_secator/8598"}, {"timestamp": "2026-09-11T18:00:05.879Z", "date_only": false, "value": "2026-09-11T18:00:05.879044Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8604", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "63352b27-28b9-493a-92f7-24c5c9ef0104", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 0-day \u0432 Chrome. CVE-2026-87491 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u042d\u0442\u043e \u0441\u0435\u0434\u044c\u043c\u0430\u044f 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n2. IonQ \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043b\u0443\u0447\u0448\u0438\u0435 \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u0441\u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0438\u0442\u043a\u043e\u0438\u043d\u0430 \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0437\u0430 26 \u0434\u043d\u0435\u0439.\n\n3. \u0410\u0433\u0435\u043d\u0442\u044b OpenAI, \u0432\u044b\u0440\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0438\u0437 \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u0441\u0440\u0435\u0434 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u043b\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0431\u0435\u0441\u0435\u0434\u044b \u043f\u043e\u0447\u0442\u0438 \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0435 \u0441\u0430\u0439\u0442\u043e\u0432 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 GitHub, \u0441\u0430\u0439\u0442\u044b pastebin, \u0441\u0430\u0439\u0442 \u043f\u0440\u0435\u043f\u043e\u0434\u0430\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e \u0445\u0438\u043c\u0438\u0438 AP \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u0441\u044b\u043b\u043e\u043a.\n\n4. \u0425\u0430\u043a\u0435\u0440\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 Trezor \u0438 \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n5. GitLab \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 - CVE-2026-85706. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438 \u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0432 API \u0434\u043b\u044f \u0444\u0438\u043a\u0441\u0430\u0446\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u00ab\u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445\u00bb. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, GitLab \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2026-87719, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432 GraphQL.\n\n6. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043b Deep-Live-Cam, \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u043d\u044b \u043b\u0438\u0446 \u043d\u0430 Python \u0441 96 600 \u0437\u0432\u0435\u0437\u0434\u0430\u043c\u0438 \u043d\u0430 GitHub. \u041e\u043d \u0438\u0437\u043c\u0435\u043d\u0438\u043b \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0434\u043b\u044f Windows \u0438 macOS. \u0412\u0437\u043b\u043e\u043c \u0434\u043b\u0438\u043b\u0441\u044f \u0432\u0441\u0435\u0433\u043e \u0434\u0435\u0432\u044f\u0442\u044c \u0447\u0430\u0441\u043e\u0432.\n\n7. Apple \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u0443\u043c\u043d\u044b\u0445 \u0447\u0430\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u044b \u0436\u0443\u0442\u043a\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043f\u043e\u0434\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u043e\u043a\u0440\u0443\u0433 \u0432 \u043b\u044e\u0431\u043e\u0435 \u0432\u0440\u0435\u043c\u044f, \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u044b, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0445 \u0434\u043b\u044f \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f, \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0430\u0434\u0430\u0447.\n\n8. LG \u0432\u0441\u044f\u0447\u0435\u0441\u043a\u0438 \u043e\u043f\u0440\u043e\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u043c\u0430\u0440\u0442-\u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u0445. \u0412\u0435\u0440\u0438\u043c.\n\n9. Anthropic \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u043b\u0435\u0436\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043b\u0438\u0446 \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u043e\u0432, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0442\u0438\u0432 \u0418\u0418 \u0438 \u0426\u041e\u0414\u043e\u0432.\n\n10. \u0425\u0430\u043a\u0435\u0440\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 F5 BIG-IP APM \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0440\u0443\u0442\u043a\u0438\u0442\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 PHP-\u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 \u0431\u0435\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0434\u0438\u0441\u043a.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0430\u0434\u0438\u0438 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u0430 \u043f\u043e\u0441\u043b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2025-53521, \u043a\u043e\u0442\u043e\u0440\u0443\u044e\u00a0\u0432 \u043c\u0430\u0440\u0442\u0435 \u043f\u0435\u0440\u0435\u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b DoS \u0432 RCE.\n\nSophos \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043e\u0431\u0440\u0430\u0437\u0435\u0446 \u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0442\u043e\u0442 \u0436\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u044b\u043b \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d ESET, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0435\u0433\u043e \u043a\u0430\u043a PoisonedRefresh.\n\n11. Check Point \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u0430\u043d\u0430\u043b, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0441\u0441\u0438\u0438 ChatGPT \u043f\u043e\u0434 \u043e\u0434\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u0430\u0434\u0430\u0447\u0438 \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e \u043f\u043e\u0434 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e. \u0418 \u044d\u0442\u043e \u043d\u0435 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u0442\u0441\u044f \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0438 \u043d\u0438 \u043e\u0434\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438. [\u00a0Check Point\u00a0]\n\n12. Onapsis \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442\u044b \u043e \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 SAP: OVERPASS - \u044d\u0442\u043e RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u044f\u0434\u0440\u0435 SAP (CVE-2026-44756) \u0438 S4GET - \u044d\u0442\u043e RCE \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 SAP NetWeaver (CVE-2026-58240). \u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS \u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u0443\u0434\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n13. Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day StyleSmuggler, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043d\u0430 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b Magento \u0438 Adobe Commerce. \u0422\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-75650.\n\n14. N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 0-day \u0432 N-central - CVE-2026-86218, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0434\u0432\u0443\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432 \u043f\u0440\u043e\u0448\u043b\u0443\u044e \u043f\u044f\u0442\u043d\u0438\u0446\u0443. \u0420\u0430\u043d\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f N-central \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c 0-day \u0430\u0442\u0430\u043a\u0430\u043c.", "url": "https://t.me/true_secator/8604"}, {"timestamp": "2026-09-12T00:00:56.646Z", "date_only": false, "value": "2026-09-12T00:00:56.646377Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/2887", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "1db2f926-181b-496c-a54f-9dc149898962", "content": "Google patched a new actively exploited Chrome V8 zero-day.\n\nCVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome\u2019s sandbox. Google has not said how it\u2019s being weaponized or who is behind it.", "url": "https://t.me/CyberDispatch/2887"}, {"timestamp": "2026-09-13T22:00:00Z", "date_only": false, "value": "2026-09-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-14T00:00:00Z", "date_only": false, "value": "2026-09-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1171", "record": "CERTFR-2026-AVI-1171", "field": "last_revision_date"}, {"timestamp": "2026-09-14T00:00:00Z", "date_only": false, "value": "2026-09-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1171", "record": "CERTFR-2026-AVI-1171", "field": "initial_release_date"}, {"timestamp": "2026-09-14T00:00:00Z", "date_only": false, "value": "2026-09-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1171", "record": "CERTFR-2026-AVI-1171", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-14T10:00:06.231Z", "date_only": false, "value": "2026-09-14T10:00:06.231794Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/6599", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "43e340d5-379b-4863-90a0-7df587150175", "content": "\u0421\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 APT-\u0433\u0440\u0443\u043f\u043f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Chrome, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f Proofpoint \u0438 Volexity, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Chrome \u0438 Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0436\u0435\u0440\u0442\u0432\u0430 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u0442 \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.\n\nProofpoint \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u0430\u043a BlueMoon\u00a0\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 TA412, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a JungleBamboo, APT31 \u0438 Violet Typhoon, 28 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u043d\u0435\u0439, \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435, \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0442\u0443 \u0436\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0428\u0410 \u0438 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438.\n\nVolexity \u0432 \u0445\u043e\u0434\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u044f\u0441\u043d\u0438\u0432, \u0447\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0430, UTA0560, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0442\u043e\u0442 \u0436\u0435 \u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Chrome, CVE-2026-85046, \u0443\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 Chromium, \u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0435\u0449\u0435 \u043d\u0435 \u043f\u043e\u043f\u0430\u043b\u043e \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u0430\u043d\u0430\u043b \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Chrome.\n\n\u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c\u00bb: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u043a\u0430\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442, \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Chrome \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0435 \u0438\u043c\u0435\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 V8, \u0434\u0432\u0438\u0436\u043e\u043a JavaScript \u0432 Chrome, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0417\u0430\u0442\u0435\u043c \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b V8, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Volexity \u043a\u0430\u043a CVE-2026-87491, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-85880.\n\n\u0412 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c\u0443 \u0432\u043e \u0432\u043a\u043b\u0430\u0434\u043a\u0435 Chrome, \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows.\n\n\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 Windows \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0435\u0451 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 Windows, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 Windows 10, Windows Server 2019 \u0438 2022, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 Windows 11 21H2.\n\nProofpoint \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e BlueMoon \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430, \u0430\u0434\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0433\u043e\u0440\u043d\u043e\u0434\u043e\u0431\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0438 \u0442\u043e\u0440\u0433\u043e\u0432\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c \u0444\u0438\u0440\u043c\u0430\u043c \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c.\n\n\u0412 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u0430\u043b\u0430\u0441\u044c. TA412 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043f\u043e\u0434 Google Gemini, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 Proofpoint \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 GemStone, \u0430 Volexity \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a LONGTALE.\n\n\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448, \u043a\u0440\u0430\u0441\u0442\u044c \u0444\u0430\u0439\u043b\u044b cookie \u0438 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043d\u0438\u043c\u043a\u0438 \u044d\u043a\u0440\u0430\u043d\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0441\u0432\u043e\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u0412 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0442\u0430 \u0436\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 ShadowPad, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 GRIMWEDGE \u043d\u0430 JScript \u043e\u0442 Volexity.\n\nProofpoint \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0447\u0442\u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 BlueMoon \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c, \u0430 \u043d\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043a\u0430\u0436\u0434\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418, \u0445\u043e\u0442\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043d\u0435\u0442.", "url": "https://t.me/S_E_Reborn/6599"}, {"timestamp": "2026-09-14T15:48:57.820Z", "date_only": false, "value": "2026-09-14T15:48:57.820389Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mvihjmo7gx2h", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "d3530f2d-fd9c-4bb9-9689-8373da2c655e", "content": "Chrome 153 starts Google\u2019s two-week major release cycle with 230 security fixes. Google also confirms active exploitation of CVE-2026-87491 in V8. Drupal teams now face a faster browser-testing cadence.\n\nhttps://bit.ly/4yA5Snc \n\n#Drupal #Chrome #WebSecurity #WebDevelopment", "url": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mvihjmo7gx2h"}, {"timestamp": "2026-09-14T22:00:00Z", "date_only": false, "value": "2026-09-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-14T22:00:00Z", "date_only": false, "value": "2026-09-14T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-15T09:06:36.135Z", "date_only": false, "value": "2026-09-15T09:06:36.135+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-15T11:07:24.141Z", "date_only": false, "value": "2026-09-15T11:07:24.141228Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvkib3uoi72v", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "48b64027-5c82-4266-8792-69d03d835c7d", "content": "Chrome+Windows zero-day chain (CVE-2026-85046, CVE-2026-87491, CVE-2026-85880) has backdoored NGOs since 1 Sept per Volexity. Update Chrome and Windows now. https://thehackernews.com/2026/09/china-linked-hackers-exploit-chrome.html", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvkib3uoi72v"}, {"timestamp": "2026-09-15T15:00:05.309Z", "date_only": false, "value": "2026-09-15T15:00:05.309760Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3449", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "4ca3736b-1b9c-40ec-85b7-f0af8108c1fd", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 JavaScript-\u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b\n\nBDU:2026-14454\nCVE-2026-87491\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html", "url": "https://t.me/bdufstecru/3449"}, {"timestamp": "2026-09-15T22:00:05.246Z", "date_only": false, "value": "2026-09-15T22:00:05.246384Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/102430", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "d499ac3e-4535-4c63-96de-7aa785f3e0e3", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 20:05:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102430"}, {"timestamp": "2026-09-16T00:00:10.405Z", "date_only": false, "value": "2026-09-16T00:00:10.405460Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102430", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "725c5b83-ded3-45b9-b1bc-578667986fac", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 20:05:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102430"}, {"timestamp": "2026-09-16T04:46:29.120Z", "date_only": false, "value": "2026-09-16T04:46:29.120093Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "7a9243f9-12a8-406e-b641-ca4180f59729", "url": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916"}, {"timestamp": "2026-09-16T08:15:10Z", "date_only": false, "value": "2026-09-16T08:15:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-16T08:15:10Z", "date_only": false, "value": "2026-09-16T08:15:10Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-16T08:15:10Z", "date_only": false, "value": "2026-09-16T08:15:10Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-16T08:15:10Z", "date_only": false, "value": "2026-09-16T08:15:10Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-16T08:45:01.822Z", "date_only": false, "value": "2026-09-16T08:45:01.822489Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-72", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "233f3ccc-19e4-4457-81fb-12b24e886f51", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-72"}, {"timestamp": "2026-09-16T20:28:05Z", "date_only": false, "value": "2026-09-16T20:28:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:30:43Z", "date_only": false, "value": "2026-09-16T21:30:43Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T17:24:03Z", "date_only": false, "value": "2026-09-17T17:24:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:24:03Z", "date_only": false, "value": "2026-09-17T17:24:03Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T17:44:45Z", "date_only": false, "value": "2026-09-17T17:44:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-17T17:44:45Z", "date_only": false, "value": "2026-09-17T17:44:45Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-21T12:51:58.334Z", "date_only": false, "value": "2026-09-21T12:51:58.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-87491", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-21T12:51:58.334Z", "date_only": false, "value": "2026-09-21T12:51:58.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-87491", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T13:17:11.283Z", "date_only": false, "value": "2026-09-21T13:17:11.283", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87491", "record": "FKIE_CVE-2026-87491", "field": "lastModified"}, {"timestamp": "2026-09-21T21:08:27.078Z", "date_only": false, "value": "2026-09-21T21:08:27.078954Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/volexity/statuses/117311072118405509", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9646a979-3f74-4592-8689-76fca034042a", "content": "Following @volexity\u2019s September 9 blog post on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) & Windows (CVE-2026-85880), Volexity discovered another threat actor, UTA0565, had been using the same exploits on Sept 3-4, 2026, while they were still unpatched. UTA0565 used multiple fake websites, posing as media organizations and an NGO, to run a more customized version of the exploit framework than previously documented instances. The payload delivered was a new custom malware family, CLEANGULP, obfuscated using control flow flattening. Full details and IOCs can be found here: https://www.volexity.com/blog/2026/09/21/mind-the-patch-gap-part-2-fake-websites-used-to-deploy-chrome-windows-0-day-exploits/ #DFIR #threatintel", "url": "https://infosec.exchange/users/volexity/statuses/117311072118405509"}, {"timestamp": "2026-09-21T21:13:42.965Z", "date_only": false, "value": "2026-09-21T21:13:42.965844Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/volexity.com/post/3mw2mwppzsc2a", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "0dcfbff2-b525-4b47-a89c-91cbebcd439c", "content": "Following our Sept 9 blog on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) & Windows (CVE-2026-85880), Volexity found a third actor, UTA0565 using the same exploits Sept 3-4, while they were still unpatched.", "url": "https://bsky.app/profile/volexity.com/post/3mw2mwppzsc2a"}, {"timestamp": "2026-09-21T21:13:43.559Z", "date_only": false, "value": "2026-09-21T21:13:43.559520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/volexity.com/post/3mw2mwrbgu22a", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "048199bf-94ad-4003-936a-30dfccf2809a", "content": "Following our Sept 9 blog on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) & Windows (CVE-2026-85880), Volexity found a third actor, UTA0565 using the same exploits Sept 3-4, while they were still unpatched.", "url": "https://bsky.app/profile/volexity.com/post/3mw2mwrbgu22a"}, {"timestamp": "2026-09-22T06:44:41.614Z", "date_only": false, "value": "2026-09-22T06:44:41.614825Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mw3mtrjgoo2v", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "b920ca49-b799-4f26-8f92-0858e7bdba2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 27 interactions\nCVE-2026-76460: 22 interactions\nCVE-2026-58704: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85046: 8 interactions\nCVE-2026-85880: 8 interactions\nCVE-2026-87491: 8 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mw3mtrjgoo2v"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": true, "value": "2026-09-23", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "evidence.0.details.due_date", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-23T10:00:52.243Z", "date_only": false, "value": "2026-09-23T10:00:52.243466Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "69d73fd9-068c-48d7-b6b9-606e5e8a19e7", "content": "A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites.\n\nThe attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break", "url": "https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html"}, {"timestamp": "2026-09-23T11:16:39.082Z", "date_only": false, "value": "2026-09-23T11:16:39.082917Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6miyj5mf2f", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "86b8fc4d-d3de-4f60-9e42-b94733993468", "content": "\ud83e\udd16 Chinese threat actor UTA0565 chained Chrome (CVE-2026-85046, CVE-2026-87491) and Windows ALPC (CVE-2026-85880) zero-days via fake sites to deploy CLEANGULP malware.\nhttps://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6miyj5mf2f"}, {"timestamp": "2026-09-23T12:38:43.965Z", "date_only": false, "value": "2026-09-23T12:38:43.965066Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mw6r3r34zu2p", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "bb38e8ac-57fd-448e-b0d4-5a74958d237a", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: UTA0565 Chains CVE-2026-85046, CVE-2026-87491, CVE-2026-85880 to Drop CLEANGULP\n\n#APT #ThreatIntel #CyberSecurity", "url": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mw6r3r34zu2p"}, {"timestamp": "2026-09-23T16:04:47Z", "date_only": false, "value": "2026-09-23T16:04:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/dr-VTIf0y0-piLzHX9OaH2cRKRIq9yIESs9l0HfnzF0DhA", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "dc07a405-ac7e-48c8-aa96-25e076bac16e"}, {"timestamp": "2026-09-23T16:04:47Z", "date_only": false, "value": "2026-09-23T16:04:47.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/dr-VTIf0y0-piLzHX9OaH2cRKRIq9yIESs9l0HfnzF0DhA", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "1e148648-76d7-4afa-bbef-8fe94868cba1"}, {"timestamp": "2026-09-24T03:13:24Z", "date_only": false, "value": "2026-09-24T03:13:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1ys77DIZO-GDJM12Y2kKkFL_LlZmH_iXH3Qq1ObYEEV1_pg", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "1df2c630-adcb-41a8-9971-858e89bf0364"}, {"timestamp": "2026-09-25T09:24:45Z", "date_only": false, "value": "2026-09-25T09:24:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cPnUkNDrzhC9sIWTfymlxK1szwNDW4bVEFI53yswT2mFGHU", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "2ac47bf8-6b6b-4154-8bfb-d3f92847b975"}, {"timestamp": "2026-09-25T09:24:45Z", "date_only": false, "value": "2026-09-25T09:24:45.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cPnUkNDrzhC9sIWTfymlxK1szwNDW4bVEFI53yswT2mFGHU", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "49c73e35-f6c9-43a8-bcb7-8208bfb20c70"}, {"timestamp": "2026-09-28T03:33:43.181Z", "date_only": false, "value": "2026-09-28T03:33:43.181335Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mwkexsv2r423", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9ae6b29b-8a8d-4841-8520-531279affe96", "content": "A Chinese threat actor, UTA0565, exploited Chrome and Windows zero-days via fake sites on Sept 3-4, 2026, chaining CVE-2026-85046, CVE-2026-87491, and CVE-2026-85880. Stay alert!", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3mwkexsv2r423"}, {"timestamp": "2026-09-28T17:19:13.157Z", "date_only": false, "value": "2026-09-28T17:19:13.157311Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/volexity/statuses/117349807010597266", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "5b1311a7-5207-4885-85ed-ca8ce845a76f", "content": "A vulnerability can be patched and still be a zero-day for millions of users. Volexity co-founder and president Steven Adair will deliver the keynote at our upcoming Volexity Cyber Sessions in Amsterdam (October 29) on multiple cases from September 2026, when Volexity uncovered three distinct Chinese threat actors exploiting Chrome (CVE-2026-85046, CVE-2026-87491) and Windows (CVE-2026-85880) vulnerabilities. The Chrome vulnerabilities had already been fixed upstream in Chromium\u2014but hadn't yet reached a public Chrome release\u2014potentially allowing the threat actors to compromise fully up-to-date users. The identical exploit code reused across otherwise unrelated operations points to a shared supplier. Steven will reconstruct these campaigns, tracing the exploit from upstream patch to active deployment and examining the evidence linking the operators despite their different infrastructure, targeting, and tooling, including a false-flag campaign designed to pin the blame on a Russian threat actor. The talk covers what this reveals about exploit supply chains, the risks created by the patch gap, and the attribution challenges posed when capabilities are shared between threat actors.\nSeating is limited. Register now to secure your spot: https://luma.com/0qtkw49c\n#dfir #threatintel", "url": "https://infosec.exchange/users/volexity/statuses/117349807010597266"}, {"timestamp": "2026-10-05T06:27:38.933Z", "date_only": false, "value": "2026-10-05T06:27:38.933782Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/achai.bark.how/post/3mx4bxavehk26", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "6e7ed340-e9f1-4460-bae6-de59f6bdade1", "content": "CVE-2026-87491\nCVE-2026-85046\nCVE-2026-17989\nCVE-2026-19556", "url": "https://bsky.app/profile/achai.bark.how/post/3mx4bxavehk26"}, {"timestamp": "2026-10-08T17:58:32.919Z", "date_only": false, "value": "2026-10-08T17:58:32.919374Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mxezxhc7ee2d", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "c8dcba7d-6d7b-4bc1-8ab2-3a03c2afcc85", "content": "How BlueMoon Exploits Chrome CVE-2026-85046 and CVE-2026-87491 https://packetstorm.news/news/view/45030 #news", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3mxezxhc7ee2d"}, {"timestamp": "2026-10-11T01:51:04.353Z", "date_only": false, "value": "2026-10-11T01:51:04.353707Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxkvc5oa4c2f", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "e33ca1e9-9ed5-4748-95f6-061ed42a77c1", "content": "Google\u304c2026\u5e74\u306b\u60aa\u7528\u3055\u308c\u305f7\u756a\u76ee\u306eChrome\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nGoogle\u306f\u3001230\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3059\u308bChrome\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u305d\u306e\u4e2d\u306b\u306f\u3001\u65e2\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\uff08CVE-2026-87491\u3001CVSS\u30b9\u30b3\u30a28.8\uff09\u3082\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u4e2d\u7a0b\u5ea6\u306e\u6df1\u523b\u5ea6\u306e\u8106\u5f31\u6027\u306f\u3001Google\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u9ad8\u6027\u80fdJavaScript\u304a\u3088\u3073WebAssembly\u30a8\u30f3\u30b8\u30f3\u3067\u3042\u308bV8\u3068\u3001Chrome\u306eJavaScript\u304a\u3088\u3073WebAssembly\u30a8\u30f3\u30b8\u30f3\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u307e\u3059\u3002\n\n\u653b\u6483\u8005\u306f\u3001\u7279\u5225\u306b\u7d30\u5de5\u3055\u308c\u305fHTML\u30da\u30fc\u30b8\u3092\u4ecb\u3057\u3066\u5883\u754c\u5916\u66f8\u304d\u8fbc\u307f\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxkvc5oa4c2f"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T21:00:00Z", "date_only": false, "value": "2026-10-14T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2111", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "d38ae421-23df-46e5-ae4a-752488788e80", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2111"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "last_revision_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "initial_release_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "revisions.0.revision_date"}]}