SparTech Software

Google patches an actively exploited Chrome XML use-after-free flaw in version 157. Users on Windows, macOS and Linux should update promptly.

ESET says Russia-linked Turla used Cereal malware on government Exchange servers in Romania and Kazakhstan to intercept NATO and EU emails.

France links a supermarket refrigeration hack to Iran’s IRGC after hundreds of stores lost temperature control, while investigators seek warrants.

Anthropic says its Claude 5.2 models outscored GPT-6 Cyber on a cyber benchmark, but the comparison uses restricted Mythos results and warrants scrutiny.

SonicWall patched seven SonicOS flaws affecting Gen 7 and Gen 8 firewalls, including an exploited SSL-VPN flaw that can bypass SAML MFA.

CISA added four actively exploited flaws to its KEV catalog, including critical bugs in OpenSSH, GPUStack, FreeSWITCH and IBM Aspera Faspex.

Researchers accessed two automakers’ connected-car systems through ForgeRock flaws, taking over customer accounts and remotely unlocking and starting vehicles.

A multistate settlement with PJ&A follows a 2023 medical data breach affecting 13.3 million people and exposes major failures in access and monitoring.

Sega says a breach at newsletter provider Arara exposed 2,196,044 email addresses, prompting phishing warnings while customer accounts remain unaffected.