Update Chrome now: Critical bugs could let attackers run code

Malwarebytes Labs round-up (May 2026): multiple high-impact stories — Google released a Chrome update addressing critical remote code execution flaws (users urged to update), while Firefox 151 also ships privacy improvements and fixes for high-priority vulnerabilities. CISA added seven exploited flaws to its KEV list including two Microsoft Defender issues that are being actively exploited. Microsoft dismantled a fraudulent code‑signing service (“Fox Tempest”) used to fraudulently obtain Microsoft certificates, and attackers replaced JDownloader installer downloads with malware. A major third‑