Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

Google is pushing an emergency patch for a zero-day vulnerability that has been exploited in the wild, and a second zero-day has been identified and is expected to be fixed in a future update.

Google has released emergency security updates to patch two high-severity Chrome vulnerabilities exploited in zero-day attacks.

If anyone were looking for a sign that the former city trader is seemingly only ever out to line his own pockets, I would suggest that this is a pretty good one.