OS Weekly: A Chrome Zero-Day, Microsoft's Biggest-Ever Patch Tuesday & Lessons From Museum Heists

Sun, 13 Sep 2026 00:00:00 +0000

This week’s news skewed toward patching math over dramatic new attack techniques: an actively-exploited Chrome zero-day, and Microsoft’s largest security update to date. Layered underneath is a good reminder that some of the best security intuition doesn’t come from a terminal at all. Here’s what’s worth your attention.

Critical Threats & Patches

Chrome’s V8 engine has an actively-exploited zero-day

Google shipped updates fixing 230 security vulnerabilities this week, including CVE-2026-87491 — an out-of-bounds write bug in Chrome’s V8 JavaScript and WebAssembly engine. The CVSS score hasn’t been published, but the flaw is already being exploited in the wild, which is the detail that matters most here.

Security Awareness on CybersecurityOS

OS Weekly: A Chrome Zero-Day, Microsoft's Biggest-Ever Patch Tuesday & Lessons From Museum Heists

Critical Threats & Patches

Chrome’s V8 engine has an actively-exploited zero-day