Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

If It Ends the Same, Let It Through" — The Comparison Operator That Broke Kestra (CVE-2026-49869)

On September 2, 2026, CISA added CVE-2026-49869 to its Known Exploited Vulnerabilities (KEV) catalog. That's not a theoretical risk — it means exploitation has been confirmed in the wild — and federal…

  • CVE-2026-49869 added to CISA's KEV catalog on September 2, 2026
  • Vulnerability allows root-level remote code execution (RCE)
  • Flaw in Java's endsWith() method enables unauthorized access

Google Chrome Reward: Full Chain Exploit Shakes Cybersecurity

Google Chrome full-chain exploit reward has just marked a historic milestone after paying $250,000 to the security firm XBOW for breaking the defenses of the most widely used browser on the planet.

  • US$250,000 reward paid to XBOW for exploiting full chain in Google Chrome.
  • Four researchers and GPT-5.6 model used to gain full control in six days for $40,000 compute cost.
  • First reward under Google's 2026 security rules, surpassing traditional multi-month attack methods.

More from Thursday 15 October →