ChainCatcher message, the Web3 security agency Wallet Guard stated that Google has released an emergency update for a new zero-day vulnerability (CVE-2023-7024) and recommends users to update their Chrome browser (including Brave, Opera, and Edge) in a timely manner.

ChainCatcher news, Slow Mist's Chief Information Security Officer 23pds tweeted that cryptocurrency users should upgrade their iOS systems, Chrome browsers, Android, and other systems as soon as possible to address the latest vulnerability challenges.He stated that recently, Google's Threat Analysis Group disclosed an iPhone zero-day vulnerability attack chain, involving man-in-the-middle (MITM) exploitation attacks, a Safari browser remote code execution vulnerability, Android MITM injection, and direct send attacks leveraging target one-time links to obtain the Chrome initial renderer remote code execution vulnerability.

ChainCatcher news, video game and related products retailer GameStop will remove its iOS and Chrome browser wallets on November 1 due to "regulatory uncertainty," and users can access them until October 1. (Source link)

ChainCatcher news, security company Imperva has revealed a Chrome browser security vulnerability named CVE-2022-3656, which has affected over 2.5 billion users and allows the theft of sensitive files, including cryptocurrency wallets and cloud service provider certificates.In this case, attackers may create a fake website offering a new cryptocurrency wallet service, which can trick users into creating a new wallet by asking them to download their "recovery" keys. These keys are actually a zip file containing symbolic links to sensitive files or folders on the user's computer. When the user unzips and uploads the "recovery" keys back to the website, the symbolic links will be processed, giving the attacker access to the sensitive files. (Source link)

Chaincatcher news, the Chrome browser has released an emergency update for version 105.0.5195.102 (Mac, Linux, and Windows) to fix a new high-severity zero-day vulnerability, identified as CVE-2022-3075, caused by insufficient data validation in the Mojo runtime library collection. Over the past three months, multiple zero-day vulnerabilities have been discovered in the Chrome browser. (Source link)