Security notes: CVE-2024-4367 in PDF.js, hiding data in emoji and Unicode homoglyphs, and how mobile apps leak identifiers to ad networks and data brokers.