InfoSec News Nuggets 02/16/2026
Google patches first Chrome zero-day exploited in attacks this year Google released emergency updates for Chrome to fix CVE-2026-2441, which it says is being exploited in the wild. The issue is a use-after-free linked to iterator invalidation in Chrome’s handling of CSS font feature values. Google did not share exploit details, which usually means defenders should assume active scanning and targeted use are both possible. Action: force-update Chrome across managed endpoints and verify version compliance…