A zero-day vulnerability has been disclosed in the popular Unity Web Player browser plugin. The flaw allows an attacker crossdomain access to websites and services using the victim’s credentials. Some ...

UPDATE, 5:45 PDT: Unity Technologies said it had identified the codepaths leading to the vulnerabilities and that it planned to release fixes on Friday. “Updates about progress on the release will be ...

A researcher is warning that a gaming plug-in installed on over 200 million PCs contains a flaw that could let attackers steal users’ data from websites they’re logged into, such as their Web mail and ...