The CVE is still embargoed[1] as of the time of this comment. =/
New Chrome Zero-Day
11–12 of 12 posts
Re: New Chrome Zero-Day
#12Why would cybercriminals not just report the bug and pick up the cash from Google? Is it genuinely that much more lucrative to exploit it?
It isn’t cybercriminals. Cybercriminals pretty much never have top tier 0day. This one is North Korean intelligence, and they get far more value out of it than Google is willing to pay.