Chrome, Defender, and Firefox 0-days linked to commercial IT firm in Spain

TL;DR

Google researchers said on Wednesday they have linked a Barcelona, Spain-based IT company to the sale of advanced software frameworks that exploit vulnerabilities in Chrome, Firefox, and Windows Defender.Researchers Clement Lecigne and Benoit Sevens said the exploit frameworks were used to exploit n-day vulnerabilities, which are those that have been patched recently enough that some targets haven't yet installed them.“TAG’s research underscores that the commercial surveillance industry is thriving and has expanded significantly in recent years, creating risk for Internet users around the globe,” they wrote.The frameworks contained “mature source code capable of deploying exploits for Chrome, Windows Defender, and Firefox” respectively.The frameworks exploited vulnerabilities that Google, Microsoft, and Firefox fixed in 2021 and 2022."

Like summarized versions? Support us on Patreon!