VoidStealer malware steals Chrome master key via debugger trick

This digest highlights multiple high-impact security events: a new information stealer named VoidStealer bypasses Chrome's Application‑Bound Encryption (ABE) using a debugger trick to extract the browser master key; the Trivy vulnerability scanner was compromised in a supply‑chain attack by TeamPCP, pushing credential‑stealing malware via official releases and GitHub Actions; Google announced an ‘Advanced Flow’ for safer APK sideloading; Microsoft Azure Monitor alerts are being abused for callback phishing and the FBI links Signal/WhatsApp phishing campaigns to Russian intelligence actors; out