Chrome Zero-Day and WordPress Mass Attack: Patch Today
Chrome Zero-Day and WordPress Mass Attack: Patch Today
An actively exploited Chrome zero-day and a mass WordPress attack campaign are targeting UK businesses right now. CISA has confirmed active exploitation of CVE-2026-85046, a type confusion vulnerability in Chrome’s V8 JavaScript engine that requires no user interaction beyond visiting a malicious webpage. Over 440,000 exploit attempts have been documented against WordPress sites running vulnerable versions of Super Forms and Elementor Pro plugins. Both issues have patches available, but the gap between patch availability and patch…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.