Chipmaker giant Qualcomm released patches on Monday fixing a series of vulnerabilities in dozens of chips, including three zero-days that the company said may be in use as part of hacking campaigns.
Qualcomm cited Google’s Threat Analysis Group, or TAG, which investigates government-backed cyberattacks, saying the three flaws “may be under limited, targeted exploitation.” According to the company’s bulletin, Google’s Android security team reported the three zero-days (CVE-2025-21479, CVE-2025-21480, and CVE-2025-27038) to Qualcomm in February.
Read more…
Source: TechCrunch News
Sign up for our Newsletter
The latest news and insights delivered right to your inbox.
Related:
- Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
November 2, 2026
On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357, a missing authentication for critical function vulnerability (CWE-306), with a CVSSv3.1 score of 8.8; it allows a local authenticated attacker to escalate privileges. CVE-2026-118527, classified as generation of ...
- ‘SMS of Death’ exploit can remotely crash unpatched Android phones
November 2, 2026
A zero-click Android flaw let attackers crash phones with a specially crafted SMS message. Repeated messages could trigger reboot loops, disrupt calls, and even affect emergency connectivity. Google patched supported Android versions, but many end-of-life devices remain permanently vulnerable. Read more… Source: Tech Radar Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered right ...
- Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated)
October 29, 2026
Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619, referred to as PHP2Shell. Both are remote code execution (RCE) vulnerabilities rated as 9.2 (CVSS 4.0). Researchers encourage reviewing the PHP Group’s security advisory and patching guidance. PHP is widely used across web servers and content management systems globally. Researchers recommend assessing your ...
- Hackers are breaking into company networks via hacked CCTV camera software
October 29, 2026
Attackers abused camera management software to gain initial access and establish persistence on networks. Campaign used DLL sideloading and reverse shells to evade detection and maintain control. Researchers urge treating camera systems as security-sensitive assets and monitoring them for abnormal activity. Read more… Source: Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered ...
- Chrome and Firefox updates fix serious security flaws
October 28, 2026
On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. The update includes 52 security fixes, including four rated Critical. On the same day, Mozilla issued Security Advisory 2026-118, which fixes 167 vulnerabilities. Firefox 159 also ...
- A security flaw in these widely used barcode scanners could open up warehouses and stores to cyberattack
October 28, 2026
Researchers find Bluetooth flaws in warehouse barcode scanners that could provide a foothold into enterprise networks. Attackers could spoof scanner input, inject keystrokes, and potentially pivot to ransomware or data theft. Kaspersky urges stronger device authentication, network segmentation, and stricter security controls for warehouse infrastructure. Read more… Source: TechRadar News Sign up for the Cyber Security Review Newsletter The latest cyber ...