Google issues warning for billions of Chrome users
Chrome users, you need to take action. Google has confirmed another very dangerous Chrome hack, its third in 10 days. Here's everything you need to know to stay safe.
A new zero-day high threat level hack has been found in Google Chrome
LIGHTROCKET VIA GETTY IMAGES
Google published the news on its official blog, classifying the new hack (CVE-2022-1232) as posing a “high” threat level. It's also having a wide impact, with Chrome on Windows, Mac, and Linux all affected.
Update 04/06: Several Chromium-based browsers have confirmed that they are also affected by CVE-2022-1232. The most prominent is Microsoft's Edge browser, with the company indicating : “Microsoft is aware of recent Chromium security patches. We are actively working on releasing a security patch.”
While the acknowledgment is welcome, it's somewhat surprising to see Edge unpatched two days after Chrome's release. Historically, Microsoft has been among the quickest out the door, but notably, here it was beaten to the punch by Brave. The increasingly popular privacy-focused Chromium browser already announced its newly corrected version returns on Tuesday. In the meantime, clarification is needed from Vivaldi and Opera who have both recently updated their browsers, although it is currently unclear whether they contain this urgent security patch. [Edit – they are patched]
Update 08/04: Microsoft has now confirmed that the Chrome emergency patch released on Monday is now available for its Chromium-based Edge browser. “The latest Microsoft Edge Stable Channel (version 100.0.1185.36) incorporates the latest security updates from the Chromium Project,” the company said in a statement. statement . This aligns Edge with Chrome, Vivaldi, Opera, and Brave. To get it, follow these steps:
- In Microsoft Edge, click on the 3 dots (“…”) in the upper right corner of the browser window
- Click on 'Help and Feedback'
- Click on 'About Microsoft Edge'
Like other Chromium browsers, this will force Edge to check for updates and install the latest version. To be protected after the update, you must restart the browser. Chrome fans will say that one of the most compelling reasons to choose it over other Chromium-based browsers is the synchronicity with which the two are updated.
That said, the main reason for choosing an alternative is the emphasis on privacy, especially with Brave and Vivaldi, although updates may be slightly delayed. As such, while your choice of browser is a matter of personal preference and priority, whatever version of Chromium you use, keep it up to date. has never been so important .
Little is currently known about the new exploit, with Google stating that “access to bug details and links may be restricted until a majority of users are updated with a fix.” Therefore, all the company is willing to disclose is the threat level, tracker, area of operation, and source:
- High – CVE-2022-1232: type confusion in V8. Reported by Sergei Glazunov of Google Project Zero on 2022-03-30
V8 is the component of Chrome responsible for processing JavaScript, the engine at the heart of Chrome. V8 was also targeted late last month with a successful Zero-Day exploit, a classification that means hackers were able to successfully attack the browser before Google could issue a fix. A few days later, Google confirmed another 28 successful Chrome exploits.
In response to this latest threat, Google announced Chrome 100.0.4896.75. It's not immediately available to everyone, with Google warning that it “will be rolling out over the next few days/weeks.” To manually check for the update, click on the three dots in the upper right corner of the browser and go to Settings > Help > About Google Chrome.
To check for Chrome updates, click the 3 dots in the top right corner, then click: Settings — Help — … [+]
Gordon Kelly
Remember: Chromium must be restarted after update. You are not safe until this is done. And with Google warning that the number of successful browser hijackers is growing rapidly, don't delay. Make it the next thing you do after reading this article.
___
Follow Gordon on Facebook
Learn more about Forbes
Google confirms increase in serious attacks on Chrome – and why
The second Zero-Day hack is coming to Chrome in 2022
#Google #issues #warning #billions #Chrome #users
Enregistrer un commentaire