
Google warns of two actively exploited Chrome zero days
Threat actors are exploiting two high severity zero day vulnerabilities in the Chrome browser that experts say IT teams must patch immediately. Google has issued emergency patches for the two holes, CVE-2026-3909 and CVE-2026-3910. This comes just days after the release of 29 fixes for holes as part of March Patch Tuesday, and a zero day patch released in February. Affected are browsers before version 146.0.7680.75. These exploits provide yet another reason why infosec leaders need to ensure there’s a corporate patching strategy in place for all authorized browsers and plugins. “If you’re not managing browser patches, your odds of getting pwned are increasing daily,” said David Shipley of Ca...