New Exploit Method Targets Google Chrome Without Needing Zero-Days

A security researcher from Imperva found a new way for attackers to target Chrome users without needing zero-day vulnerabilities. Using the File System Access API, websites can read and write to local files when users give permission.