Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
2026-11-10T07:23:59Z•98c92b2861ea2facc42dbcacedc63dda0bc228cfb4d607dc4371b0caaeacbe9a
AI securityChromeOpenSSHPlex Media ServerPlex2ShellQNAP NASRSA-1024Russia-aligned actorsSSHoleXMLactively exploited vulnerabilityauthentication bypasscloud service compromisecryptographydata breacheducation sectorhacktivismhealth datapersonally identifiable informationuse-after-freezero-day
What happened
SecurityWeek RSS feed covering an actively exploited Chrome XML use-after-free zero-day, exploitation of the OpenSSH “SSHole” authentication bypass, Plex2Shell attacks against QNAP NAS devices, multiple large-scale data breaches, alleged pro-Russian hacktivist activity, and emerging research on AI-assisted attacks against RSA-1024. The most urgent items are the exploited browser and OpenSSH vulnerabilities, although specific CVE identifiers are not provided in the feed.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 98c92b2861ea2facc42dbcacedc63dda0bc228cfb4d607dc4371b0caaeacbe9a
- Enrichment time
- 2026-11-10T07:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.