zero-day security flaw

Unofficial versions of the Chinese e-commerce app Pinduoduo installed malicious apps on and stole user data from millions of Android devices

In comparison, Google products were targeted by 10 zero-days, while Microsoft took first place and accounted for a whopping 18 of the exploited zero-days

The now-fixed exploit was caused by insufficient data validation in Mojo, a collection of runtime libraries used by Chrome. 

The heap-based buffer overflow vulnerability was originally reported on July 1 and, according to Google, was being actively exploited in the wild.

Over 36 journalists, anchors, executives, and producers for Al Jazeera have been found to be the latest victims of a zero-day vulnerability on iOS that requires zero user interaction. 

Italian teenager uncovers two zero-day vulnerabilities in OS X.

Zero-day security flaw allows hackers to install malware on Macs made before mid-2014.