Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more
blog.trailofbits.com
A vulnerability in Electron applications allows attackers to bypass code integrity checks by tampering with V8 heap snapshot files, enabling local backdoors in applications like Signal, 1Password, and Slack.