An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
The payload grabbed login data on any page that loaded it and rewrote deposit addresses on three trading sites, the security ...