// day
Jun 1, 2026
2 new incidents, 0 with updates.
## started
- criticalclosedpatchedclosed Oct 16, 2026
AOMEI Backupper update servers backdoored (Mandiant)
› AOMEI Backupper
Google Mandiant and ManageEngine reported that a threat actor tampered with AOMEI Backupper update servers mid-2026, pushing a backdoor to users across multiple countries. Disclosure clustered around Oct 16 2026.
- highclosedpatchedclosed Jun 30, 2026
Chrome zero-day CVE-2026-11645 (V8 OOB)
› Google Chrome / Chromium V8
June 2026 Chrome emergency update patched CVE-2026-11645, an out-of-bounds read/write in V8 exploited in the wild (fifth Chrome zero-day of 2026 at the time). Stable builds 149.0.7827.102/.103.
CVE-2026-11645
