The weakness involves the way these browsers display certain characters in the address bar. Until Google released version 58 in the past 24 hours, for instance, Chrome displayed https://www.xn--80ak6aa92e.com/ as https://www.apple.com. The latest versions of Firefox and Opera by default continue to present the same misleading address.
A security loophole that would allow someone to add extra steps to the counter on your Fitbit monitor might seem harmless. But researchers say it points to the broader risks that come with technology’s embedding into the nooks of our lives.
First they came for the applications, no-one said a word, when they came for the macros, there was silence. Now they’ve come for the JPEGs who had always merely watched on the sidelines, thinking they were safe. There was no-one left to bear witness … Microsoft Warns of Critical JPEG Flaw “A security flaw in the way many Microsoft applications process JPEG images could allow an attacker to gain control over a computer running the software, Microsoft warned this week.”