A Touch of Pwn - multiple vulnerabilities in the top three fingerprint sensors embedded in laptops successfully exploited, allowing complete bypass of Windows Hello authentication

https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/

New 0-day in Chrome and Firefox will likely plague other software

https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/

Chinese hackers stole tens of thousands of emails from U.S. State Department accounts after breaching Microsoft's cloud-based Exchange email platform in May.

https://www.bleepingcomputer.com/news/security/microsoft-breach-led-to-theft-of-60-000-us-state-dept-emails/

Google has now migrated maps.google.com to www.google.com/maps thus if you grant Geoloc permission in your browser, every G-service on www.google.com can track your location.

https://garrit.xyz/posts/2022-11-24-smart-move-google