Chrome

September 2024 Patch Tuesday forecast: Downgrade is the new exploit

September 6, 2024

I asked for a calm August 2024 Patch Tuesday in last month’s forecast article and that came to pass. The updates released were limited to the regular operating systems and all …

New Chrome zero-day actively exploited, patch quickly! (CVE-2024-7971)

August 22, 2024

A new Chrome zero-day vulnerability (CVE-2024-7971) exploited by attackers in the wild has been fixed by Google. About CVE-2024-7971 CVE-2024-7971 is a high-severity …

Chrome, Edge users beset by malicious extensions that can’t be easily removed

August 12, 2024

A widespread campaign featuring a malicious installer that saddles users with difficult-to-remove malicious Chrome and Edge browser extensions has been spotted by researchers. …

“0.0.0.0-Day” vulnerability affects Chrome, Safari and Firefox

August 9, 2024

A “0.0.0.0-Day” vulnerability affecting Chrome, Safari and Firefox can be – and has been – exploited by attackers to gain access to services on …

Google fixes yet another Chrome zero-day exploited in the wild (CVE-2024-5274)

May 24, 2024

For the eighth time this year, Google has released an emergency update for its Chrome browser that fixes a zero-day vulnerability (CVE-2024-5274) with an in-the-wild exploit. …

Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947)

May 16, 2024

For the third time in the last seven days, Google has fixed a Chrome zero-day vulnerability (CVE-2024-4947) for which an exploit exists in the wild. About CVE-2024-4947 …

Google fixes Chrome zero-day with in-the-wild exploit (CVE-2024-4671)

May 10, 2024

Google has fixed a Chrome zero-day vulnerability (CVE-2024-4671), an exploit for which exists in the wild. About CVE-2024-4671 CVE-2024-4671 is a use after free vulnerability …

May 2024 Patch Tuesday forecast: A reminder of recent threats and impact

May 10, 2024

The updates have been released: May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040) The thunderstorms of April patches have passed, …

How Google plans to make stolen session cookies worthless for attackers

April 3, 2024

Google is working on a new security feature for Chrome called Device Bound Session Credentials (DBSC), meant to prevent attackers from using stolen session cookies to gain …

February 2024 Patch Tuesday forecast: Zero days are back and a new server too

February 9, 2024

UPDATE: February 13, 14:55 ET – February 2024 Patch Tuesday is live. January 2024 Patch Tuesday is behind us. A relatively light release from Microsoft with 39 CVEs …

Google fixes actively exploited Chrome zero-day (CVE-2024-0519)

January 17, 2024

In the new stable release of the Chrome browser, Google has fixed three security vulnerabilities affecting the V8 engine, including one zero-day (CVE-2024-0519) with an …

Google fixes Chrome zero day exploited in the wild (CVE-2023-6345)

November 29, 2023

Google has released an urgent security update to fix a number of vulnerabilities in Chrome browser, including a zero-day vulnerability (CVE-2023-6345) that is being actively …