The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have warned of active LummaC2 malware campaigns attacking the nation’s critical infrastructure. The malware aims to exploit security gaps to steal data such as credentials and financial records. Authorities urge organizations to take recommended mitigation measures. Concurrently, five internet domains linked to the malware operation have been seized, marking a step in disrupting the malware’s worldwide reach.

Chrome Vulnerabilities Let Attackers Execute Malicious Code Remotely
Google released an urgent Chrome security update to address high-severity vulnerabilities, including a critical “Use after free” flaw in the Compositing system. This allows remote