🕵️ RESEARCH & DEEP DIVES
Microsoft adds age-awareness APIs that can tell if users are children, teens, or adults — BleepingComputer
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a r... — CVE ThreatInt
Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a re... — CVE ThreatInt
Incorrect authorization in Updater in Google Chrome on on Windows prior to 15... — CVE ThreatInt
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153... — CVE ThreatInt
Information leak in Transactions Platform in Google Chrome prior to 153.0.801... — CVE ThreatInt
Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 all... — CVE ThreatInt
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities — Cisco Talos
We should have an annual Year 1995 day at work where we do stuff like open the kimono and eat our own dogfood. — @SwiftOnSecurity@infosec.exchange
Patch Tuesday - September 2026 — rapid7.com (discovered)
OpenIDC/cjose Critical JWE Weak Encryption (CVE-2026-53939) — thehackerwire.com (discovered)
📋 ADVISORIES
📄 Source for Google Chrome 153.0.8010.36 fixes multiple information leak and authorization flaws — chromereleases.googleblog.com
📄 Source for Google fixes multiple Chrome authorization flaws ahead of 153.0.8010.36 release — issues.chromium.org
📄 Source for Google Chrome 153.0.8010.36 fixes multiple information leak vulnerabilities across Frames, Extensions, Prefetch, DOM and Sources — chromereleases.googleblog.com
📄 Source for Google Chrome 153.0.8010.36 patches V8 memory corruption flaw (CVE-2026-87489) — issues.chromium.org
📄 Source for Chrome update fixes missing authorization flaws including DOM info leak (CVE-2026-87631) — chromereleases.googleblog.com