Global cybersecurity report highlights major zero-day exploits and AI risks

A recent roundup of global cybersecurity developments highlights several critical vulnerabilities and large-scale threats. Major tech entities including Google, Microsoft, Cisco, and Adobe have faced significant security challenges, with Google addressing its seventh actively exploited Chrome zero-day of 2026. Microsoft reported a massive Patch Tuesday involving 974 CVEs, including two zero-days and 20 wormable bugs.

Artificial intelligence security has emerged as a primary concern, with reports noting that AI supply chains face risks on the open internet and that AI sandboxes are failing security tests. Additionally, US agencies have issued warnings regarding Chinese AI firms extracting advanced models.

Data breaches and exploitation activities continue to impact various sectors. Notable incidents include the sale of data belonging to 32.8 million Condé Nast users following a leak, a $320 million drain from the Liquid Network, and the exploitation of Cisco and SonicWall flaws for ransomware and mass exploitation. Other reported threats include North Korea-linked hackers utilizing backdoors in HAProxy and a massive Vietnam-linked database exposure containing passport and flight data.