Google's New .zip and .mov Domains Raise Security Concerns
The new .zip Top Level Domain (TLD) can be abused for phishing purposes using Unicode tricks. Microsoft Sharepoint is automatically trying the most common passwords to scan inside encrypted zip files, which is a concern for security researchers. Essential Addons for Elementor and possearchproducts are two web plugins with high-priority vulnerabilities that allow attackers to take over user accounts and steal credit card information. BlackLotus has broken Secure Boot on Windows, and a patch and workaround have been found. IPv6 and vm2 escapes are also causing security concerns. The Wemo Mini Smart Plug V2 has a buffer overflow vulnerability that can be leveraged for Remote Code Execution.