GOOGLE FIXES CHROME ZERO-DAY EXPLOITED IN ESPIONAGE CAMPAIGN

Summary from the TLDR InfoSec newsletter

Google has fixed a high-severity Chrome zero-day vulnerability that allowed malicious users to escape the browser sandbox. Researchers from Kaspersky reported this vulnerability, which they described as an “incorrect handle provided in unspecified circumstances in Mojo on Windows.” Attackers are actively exploiting this vulnerability to infect targets with sophisticated malware used for espionage. A similar zero-day vulnerability was also recently disclosed and patched in Firefox.