1-CLICK EXPLOIT IN SOUTH KOREA'S BIGGEST MOBILE CHAT APP

Summary from the TLDR Web Dev newsletter

The KakaoTalk Android app had a vulnerability that allowed attackers to execute arbitrary JavaScript in its WebView. The vulnerability leaked an access token that could be used to take over the user's account. Attackers could use the token to register their device on the victim's account and read their chat messages.