CERT24Weekly recap: Chrome zero-day, UniFi exploits, macOS stealers and VPN flawLoading data…
CERT24Threat Observatory
Period

Weekly recap: Chrome zero-day, UniFi exploits, macOS stealers and VPN flaw

The Hacker News weekly recap describes multiple cybersecurity events. Google patched the actively exploited Chrome vulnerability CVE-2026-11645. ShinyHunters exploited an unpatched Oracle PeopleSoft flaw, packages in the Arch User Repository were compromised, and Check Point reported limited active exploitation of a VPN vulnerability. The recap also covers active exploitation of UniFi OS Server, phishing campaigns, malicious packages and ransomware attacks.

← Back to intelligence

Weekly recap: Chrome zero-day, UniFi exploits, macOS stealers and VPN flaw

The Hacker News weekly recap describes multiple cybersecurity events. Google patched the actively exploited Chrome vulnerability CVE-2026-11645. ShinyHunters exploited an unpatched Oracle PeopleSoft flaw, packages in the Arch User Repository were compromised, and Check Point reported limited active exploitation of a VPN vulnerability. The recap also covers active exploitation of UniFi OS Server, phishing campaigns, malicious packages and ransomware attacks.