The Rust-based browser engine Servo 0.0.5 supports quantum-safe algorithms and improves form controls, performance, and stability.
APT28 exploited CVE-2026-21513, an MSHTML zero-day (CVSS 8.8), using malicious LNK files to bypass security controls and execute code.