Security firm Remedio says an integer overflow in TeamViewer's screen processing can be triggered from inside an ordinary session, letting a hostile host crash or run code on the viewer's system. TeamViewer has patched it.
Google promoted Chrome 156 to the stable channel with patches for 353 vulnerabilities, including six rated critical, and said none were known to be exploited in the wild.
Elastic reported that a fake Web3 accelerator used malicious npm packages, pitched with free AI credits and security audits, to deliver information stealers and backdoors to Windows and macOS machines.