Chrome Zero-Day, Router Hijacks and Text‑Based QR Phishing Drive Weekly Threat Surge

Security researchers highlighted a wave of high‑profile vulnerabilities this week, ranging from a critical Chrome zero‑day to sophisticated router compromises and a novel QR‑code phishing method that sidesteps traditional image‑blocking defenses.

The Chrome flaw, classified as a remote code execution vulnerability, allows malicious web pages to execute arbitrary code on vulnerable browsers. Disclosed to Google in early June, the bug was patched within days, but not before proof‑of‑concept exploits circulated on underground forums. Analysts warn that even short exposure windows can be weaponized by opportunistic actors, underscoring the importance of rapid update cycles for both consumers and enterprise environments.

In parallel, a surge of router hijack campaigns targeted devices still operating with default credentials or outdated firmware. Attackers leveraged publicly available exploits to gain administrative access, then re‑routed traffic through malicious servers or deployed crypto‑mining payloads. The incidents predominantly affected consumer‑grade routers, highlighting the ongoing risk posed by unmanaged network hardware in homes and small offices.

Supply‑chain concerns resurfaced with a targeted attack on a popular developer toolset. Malicious code was injected into a package distributed through a trusted repository, enabling threat actors to compromise the build pipelines of downstream projects. While the exact scope remains under investigation, the episode reinforces the growing attention on software‑supply‑chain hygiene and the need for reproducible builds and strict provenance checks.

A particularly inventive phishing vector emerged that uses a scannable QR code rendered entirely from text characters. Because the code appears as plain text rather than an embedded image, it bypasses email clients that block external images by default. Recipients who manually copy the text into a QR scanner are directed to malicious sites that harvest credentials or deliver malware. Security experts note that the technique exploits a common user habit of disabling image loading as a privacy measure, turning a defensive setting into an inadvertent attack surface.

Collectively, these developments illustrate the multi‑layered nature of modern cyber threats, where vulnerabilities in browsers, network equipment, development ecosystems and even email rendering can be chained together. Defenders are urged to apply patches promptly, enforce strong router passwords, adopt supply‑chain verification practices, and educate users about unconventional phishing formats. As threat actors continue to refine low‑friction attack paths, a combination of technical controls and user awareness remains the most effective line of defense.