Chrome security bug

[Steve]

Chrome's been showing an Update link since Thursday.   Seems it would be a very good idea to do it.
 
'Google, whose Project Zero bug-hunting team is often surprisingly vocal when describing and discussing software vulnerabilities, has taken a very quiet approach to a just-patched bug in its Chrome browser.

In this case, the low-key announcement is understandable, because the patch fixes a hole that cybercrooks are apparently already abusing:'

https://nakedsecurity.sophos.com/2021/02/05/chrome-zero-day-browser-bug-found-patch-now/   (other sources are available)

[Barman]

Chrome's been showing an Update link since Thursday.   Seems it would be a very good idea to do it.
 
'Google, whose Project Zero bug-hunting team is often surprisingly vocal when describing and discussing software vulnerabilities, has taken a very quiet approach to a just-patched bug in its Chrome browser.

In this case, the low-key announcement is understandable, because the patch fixes a hole that cybercrooks are apparently already abusing:'

https://nakedsecurity.sophos.com/2021/02/05/chrome-zero-day-browser-bug-found-patch-now/   (other sources are available)

 

[Nick]

 

[Just One More]

Chrome's been showing an Update link since Thursday.   Seems it would be a very good idea to do it.
 
'Google, whose Project Zero bug-hunting team is often surprisingly vocal when describing and discussing software vulnerabilities, has taken a very quiet approach to a just-patched bug in its Chrome browser.

In this case, the low-key announcement is understandable, because the patch fixes a hole that cybercrooks are apparently already abusing:'

https://nakedsecurity.sophos.com/2021/02/05/chrome-zero-day-browser-bug-found-patch-now/   (other sources are available)

 

Sorted, thanks 

[Steve]

Not a cheering read unless you own an Apple device https://www.technologyreview.com/2021/02/03/1017242/google-project-zero-day-flaw-security/amp/
 
“In the worst case, a couple of zero-days that I discovered were an issue of the vendor fixing something on one line of code and, on literally the next line of code, the exact same type of vulnerability was still present and they didn’t bother to fix it,”