Google wants you to update Chrome right now - Zero-Day exploited
By MYBRANDBOOK
Hot line: Google is notifying to all the Chrome users globally on an urgent basis to update their browsers immediately after a zero-day exploit that could give hackers direct access to a user's OS has been found. The most recent version is 72.0.3626.121, and it's the version you want to be running to make sure you're safe from this exploit.
Google is pushing users to update Chrome across all platforms after a critical vulnerability was discovered and patched.
The vulnerability exploits a security flaw known as CVE-2019-5786. The security flaw is a memory management issue in Chrome's FileReader which gives hackers the opportunity to inject and execute malicious code.
In computer parlance, a zero-day is an exploit that the software vendor is not aware of — and therefore did not have time to address — until it’s publicized. This particular attack involves the FileReader API that allows websites to read local files, while the 'Use-after-free' class of vulnerabilities — at worse — allows for execution of malicious code.
FileReader is a embedded program in most browsers that allows web apps to read the contents of a user's local file system. The vulnerability identified by Google allows malicious code to leave Chrome's security environment and run commands on the underlying OS.
Well-known Chrome security researcher Justin Schuh concisely addressed the urgency of this update on Twitter:
Google is calling this a "zero-day" vulnerability, meaning that the bad guys figured out how to exploit it before the good guys were able to find and patch it.
The version of Chrome you should be running is 72.0.3626.121, released at the beginning of March 2019. To check your version number, type chrome://settings/help into the address bar. From there, you will be able to see your version number. Just going to that page will trigger an update check, and Chrome will prompt you to relaunch it when finished. You can also manually download the latest version of Chrome here.
Link :
How to Update
Normally updates happen in the background when you close and reopen your computer's browser. But if you haven't closed your browser in a while, you might see a pending update:
1. On your computer, open Chrome.
2. At the top right, look at More More.
3. If an update is pending, the icon will be colored:
Green: An update's been available for 2 days.
Orange: An update's been available for 4 days.
Red: An update's been available for 7 days.
To update Google Chrome:
1. On your computer, open Chrome.
2. At the top right, click More More.
3. Click Update Google Chrome. If you don't see this button, you're on the latest version.
4. Click Relaunch.
The browser saves your opened tabs and windows and reopens them automatically when it restarts. If you'd prefer not to restart right away, click Not now. The next time you restart your browser, the update will be applied.
Legal Battle Over IT Act Intensifies Amid Musk’s India Plans
The outcome of the legal dispute between X Corp and the Indian government c...
Wipro inks 10-year deal with Phoenix Group's ReAssure UK worth
The agreement, executed through Wipro and its 100% subsidiary,...
Centre announces that DPDP Rules nearing Finalisation by April
The government seeks to refine the rules for robust data protection, ensuri...
Home Ministry cracks down on PoS agents in digital arrest scam
Digital arrest scams are a growing cybercrime where victims are coerced or ...
Icons Of India : Deepak Sharma
Deepak Sharma spearheads Schneider Electric India. He brings with him ...
ICONS OF INDIA : SUNIL BHARTI MITTAL
Sunil Bharti Mittal is the Founder and Chairman of Bharti Enterprises,...
Icons Of India : Dr. Sanjay Bahl
Dr. Sanjay Bahl has around four decades of experience in the ICT indus...
TCIL - Telecommunications Consultants India Limited
TCIL is a government-owned engineering and consultancy company...
GSTN - Goods and Services Tax Network
GSTN provides shared IT infrastructure and service to both central and...
EESL - Energy Efficiency Services Limited
EESL is uniquely positioned in India’s energy sector to address ener...
Indian Tech Talent Excelling The Tech World - Sanjay Mehrotra, CEO- Micron Technology
Sanjay Mehrotra, the President and CEO of Micron Technology, is at the...
Indian Tech Talent Excelling The Tech World - ARVIND KRISHNA, CEO – IBM
Arvind Krishna, an Indian-American business executive, serves as the C...
Indian Tech Talent Excelling The Tech World - Thomas Kurian, CEO- Google Cloud
Thomas Kurian, the CEO of Google Cloud, has been instrumental in expan...