Critical Chrome Zero-Day Under Active Attack, North Korean Campaigns Target KakaoTalk, Supply Chain Attacks Hit Python Repos
Google confirms active exploitation of Chrome zero-day CVE-2026-3909 affecting Skia rendering. Meanwhile, North Korean Konni group leverages KakaoTalk for malware distribution and GlassWorm campaign injects malware into hundreds of Python repositories using stolen GitHub tokens.