
Google patches actively exploited V8 zero-day in Chrome
CVE-2026-85046 is a type confusion bug in the JavaScript engine, fixed alongside eleven other vulnerabilities in a gradual rollout.
Saturday, September 5, 2026

Independent investigators tracked thousands of edits by agents carrying OpenAI identifiers, months before the Hugging Face breach, and are calling for outside post-incident inquiries.

CVE-2026-85046 is a type confusion bug in the JavaScript engine, fixed alongside eleven other vulnerabilities in a gradual rollout.

Previdian sensors logged requests matching a public proof-of-concept for CVE-2026-19490, which Citrix patched in August.

Microsoft traced a campaign using invisible Unicode tag characters that peaked above 2.37 million messages in late February.

CodeRabbit reports gains on cross-file code review, while OpenAI reportedly blocks proof-of-concept exploit requests after a perfect ExploitBench score.

Beijing meeting in mid-September would put AI-directed cyberattacks and alleged model distillation on the table ahead of a Trump-Xi summit.

The program targets under-resourced utilities and local governments, with American companies first in line and eligibility details still sparse.

Claude wrote the Lean formalization largely autonomously over 11 days, building on a community effort begun in 2024.