CISA: Patch Bug Exploited by Chinese E-commerce App

A leading US security agency has given the government until May 4 to patch a zero-day vulnerability which was allegedly exploited by an e-commerce app to eavesdrop on users.