Google Confirms New And Critical Chrome ‘Use-After-Free’ Memory Update

As Google releases yet another Chrome security update, here’s what you need to know about use-after-free flaws.
CSO Online

Fake TTF files deliver stealthy malware in global phishing campaign

Attackers were found using a Lua-based malware loader posing as a TrueType font tile, with layered obfuscation and fileless ...
TechRepublic

New Apple Exploit Exposes Millions of iPhones Worldwide, No Software Fix Available

Researchers disclosed usbliter8, a SecureROM exploit affecting older Apple devices that can bypass boot protections with physical access. Researchers at cybersecurity firm Paradigm Shift have revealed ...
Bleeping Computer

New ChocoPoC malware targets researchers via trojanized PoC exploits

Multiple weaponized proof-of-concept (PoC) exploits on GitHub were found delivering a Python-based remote access trojan (RAT) named ChocoPoC that can execute commands and steal sensitive data in a ...
The New York Times

Employers Exploit Unauthorized Immigrants to Keep Wages Low

Daniel Costa is the director of immigration law and policy research at the Economic Policy Institute, and a visiting scholar at the University of California, Merced. He is on Twitter. Updated ...
Infosecurity-magazine.com

Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits

A pseudonymous security researcher has released over 30 proof-of-concept exploits for zero-day vulnerabilities in open-source projects without disclosing them to the maintainers first. The dump, ...