On Wednesday, Coinbase launched a new feature, dubbed “Coinbase Pay,” that enables its clients to fund their Coinbase Wallets directly from a Chrome browser extension. According to its staff, Coinbase Pay intends to make it intuitive for anyone to participate in decentralized finance, or DeFi, swap tokens on decentralized exchanges, or DEXs, and purchase nonfungible tokens, or NFTs, in just a few clicks. Specifically, they wrote: “Before Coinbase Pay, users who wanted to add funds to their Coinbase Wallet from the browser extension needed to navigate to Coinbase.com, sign in to their account, copy-paste their wallet address, and manually transfer funds from their Coinbase account. The process was not only cumbersome, but also left the user vulnerable to user error.”...
In April, Kaspersky experts discovered a number of highly targeted attacks against multiple companies utilising a previously undiscovered chain of Google Chrome and Microsoft Windows zero-day exploits. One of the exploits was used for remote code execution in the Chrome web browser, while the other was an elevation of privilege exploit fine-tuned to target the latest and most prominent builds of Windows 10. The latter exploits two vulnerabilities in the Microsoft Windows OS kernel: Information Disclosure vulnerability CVE-2021-31955 and Elevation of Privilege vulnerability CVE-2021-31956. Microsoft has patched both today as part of Patch Tuesday. Zero-Day Attacks Recent months have seen a wave of advanced threat activity exploiting zero-days on the internet. In mid-April, Kaspersky experts...