Chrome has seen many hacking and exploits in its days. And who can say that this is already enough?
Earlier this month, we became aware of zero-day Chrome, which state-sponsored hackers based in North Korea were able to access. The group was able to do this before the patch was out in mid-February.
The group of hackers was able to make their way and compromise real websites by spoofing them with identical domain names.
Unfortunately now, there is another Chrome zero-day, the second attack this year. Still, Google is quickly rolling out an emergency update as its fix.
Suggestion reads:
Chrome update release for zero-day exploit
On Friday, tech giant, Google, released a Chrome update that addresses a fix for a high-severe zero-day exploit that made its way into the browser. Chrome 99.0.4844.84 for Windows, Mac and Linux is already in a stable channel that is available to the users.
According to the Chrome Releases blog post, Google says the release contains a security update. This update is for the zero-day attack CVE-2022-1096, which was first reported to the company on March 23 through an anonymous tip.
Read: Google warns users about serious and high-risk vulnerabilities found in Chrome
“Google knows an exploit exists in the wild for CVE-2022-1096,”
Google explains.
Zero-day is a flaw in Chrome’s JavaScript engine and generally the flaws only lead to browser crashes, which occur after a successful exploit via reading or writing memory out of buffer limits.
But hackers can also take advantage of this flaw by putting their code in the browser. And this is exactly the kind of thing that hackers like to use against their unsuspecting victims and it is also the most common.
Chrome update release for zero-day exploit
You may ask how the attacks are being conducted at the moment. But Google is silent about it and hasn’t provided any information other than acknowledging the existence of the zero-day flaw and that they are already exploiting hackers.
According to Google, they are keeping some data away from the public as a security measure, adding that full details of how the attacks worked will not be released until most users have a way to fix it. Don’t update.
Also read: Remove Google Chrome browser on Android now, cyber security expert warns users
“Access to bug descriptions and links may be restricted until the majority of users are updated with fixes,” Google states. “We will also maintain restrictions if a bug exists in a third-party library that other projects similarly depend on, but have not yet fixed.”
The good thing though is that Google was able to release a patch even before the exploit became widely known. The company has urged all users to update their Chrome browser to the latest version 99.0.4844.84 at the earliest.
More tech news:
