⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More
Weekly recap highlights Chrome 0-day, PeopleSoft exploit, Arch Linux package compromise, and PhaaS takedown.
This week's cybersecurity recap includes Google patching a zero-day vulnerability in Chrome that was actively exploited in the wild. Additionally, the ShinyHunters gang exploited an Oracle PeopleSoft zero-day, leading to data exfiltration and CISA adding it to the KEV catalog. Hundreds of Arch Linux packages were compromised to distribute a rootkit and stealer, and the FBI took down domains linked to the Outsider phishing-as-a-service kit.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Chrome?
Get an email when a new story names Chrome, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThis week's incidents demonstrate the severe consequences of delayed patching and compromised software supply chains. Google's Chrome zero-day was actively exploited in the wild, while Oracle PeopleSoft's zero-day led to data exfiltration by the ShinyHunters gang. The compromise of hundreds of Arch Linux packages to distribute malware shows how attackers can weaponize trusted software repositories. These incidents underscore the need for rapid patch deployment and robust supply chain security measures to prevent widespread exploitation.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-11645
- cve — CVE-2026-2441
- cve — CVE-2026-3909
- cve — CVE-2026-3910
- cve — CVE-2026-5281
- cve — CVE-2026-35273
- malware — atomic-lockfile