Urgent.News

What's breaking now, across thousands of outlets.

Tech

Google Chrome Reward: Full Chain Exploit Shakes Cybersecurity

Google Chrome full-chain exploit reward has just marked a historic milestone after paying $250,000 to the security firm XBOW for breaking the defenses of the most widely used browser on the planet. Achieving an attack that takes absolute control of a computer with Windows, without downloads or suspicious clicks, usually requires months of work by military intelligence teams.

Translated from Spanish Read in Spanish

Google has paid $250,000 to security firm XBOW for discovering a full-chain exploit in Chrome, the world's most widely used browser. The exploit, achieved with the help of OpenAI's GPT-5.6 Sol model and costing $40,000 in computing resources, allowed attackers to take control of a Windows computer without requiring downloads or suspicious clicks.

The breakthrough was made by a team of four researchers in just six days during the Black Hat and DEF CON conferences in Las Vegas. Google has since applied patches to its Chromium browser, and XBOW is developing an autonomous product to detect logical flaws in applications and infrastructure.

Written by urgent.news from Dev.to's report — not a translation of it. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

If It Ends the Same, Let It Through" — The Comparison Operator That Broke Kestra (CVE-2026-49869)

On September 2, 2026, CISA added CVE-2026-49869 to its Known Exploited Vulnerabilities (KEV) catalog. That's not a theoretical risk — it means exploitation has been confirmed in the wild — and federal…

  • CVE-2026-49869 added to CISA's KEV catalog on September 2, 2026
  • Vulnerability allows root-level remote code execution (RCE)
  • Flaw in Java's endsWith() method enables unauthorized access

Building Production-Ready SaaS and CRM Systems with Node.js and Next.js in Kerala

Introduction to Modern SaaS and CRM Engineering Building enterprise-grade Software-as-a-Service (SaaS) and Customer Relationship Management (CRM) platforms requires a delicate balance of rapid MVP…

  • Node.js and Next.js used to build production-ready SaaS and CRM systems in Kerala
  • TypeScript adopted for enhanced developer experience and code reliability
  • Next.js 15 with React Server Components optimizes high-performance CRM dashboards

Capacitor Push Notifications for Lovable

Push is the feature that usually makes founders give up on the PWA route and wrap their Lovable app properly. A web app on iPhone only gets push after the user adds it to the home screen, and almost…

  • Capacitor push notifications simplify PWA push notifications on iOS and Android.
  • Detailed guide covers setup on iOS and Android, avoiding common pitfalls.
  • Paid Apple Developer account required for iOS silent push notifications.

More from Thursday 15 October →