Users of Google Chrome have been urged to update the browser after Google announced attackers have been exploiting a vulnerability present in the current version.
On August 30, an anonymous researcher contacted the company to report the issue. Google is “aware of reports that an exploit for CVE-2022-3075 is circulating in the wild.”
However, Google has not revealed any details about the fault, but the unidentified researcher said it was due to “inadequate data validation in Mojo.”
The same researcher also found a separate zero-day in Chrome, which attackers are exploiting. This second bug, CVE-2020-6418, has been patched in the latest version of the browser. Hackers can exploit these vulnerabilities to gain remote code execution on a target system.
Google, on the other hand, has not yet provided any information regarding the security hole. “Until a majority of users have been updated with a patch, the details and links for bugs may be restricted,” Google added.
“We will also continue to have restrictions if the bug is located in a third-party library that other projects similarly depend on but haven’t fixed yet.”
The blog post also gave users some advice on how they can update their browsers and stay protected against any potential attacks.
“We recommend that users change their passwords on any site where they may have used the same password as their Google account,” Google said.
“In addition, we advise users to enable two-factor authentication on their Google account and any other accounts where it is available.”
Users can update their browsers by going to the settings menu and selecting “About Google Chrome.” The new version, 72.0.3626.121, will then be downloaded and installed automatically.
Google also urged users to ensure that their Chrome apps and extensions are up to date.
“Out-of-date apps and extensions can have security vulnerabilities that a malicious site could exploit,” the company said.
Google concluded they’re “working hard to continue making Chrome more secure with each release.”
More Stories
Killnet and AnonymousSudan Collaborate to Launch Cyber Attacks on Western Organisations
In recent news, it has been reported that two Russia-sympathetic hacktivist groups, Killnet and AnonymousSudan, have allegedly launched a series...
$4000 Gone In An Instant: Mother Defrauded in Facebook Marketplace Car Deal
A mother of four is warning others to be cautious after believing she had purchased a safe and dependable car...
Shocking Scam: Sydney Family Loses $200K Life-Savings in Suncorp Spoofing Fraud
A family from Sydney has lost their life savings worth $200,000 due to a fraudulent scam. Peter and Madison, who...
Mysterious Money Transfer Leaves Couple Speechless: How They Got an Unsolicited $4000
A young couple in Melbourne claims their bank is making up a personal loan they do not understand. Ashley and...
Phishing + AI + Voice Cloning= Big Trouble: The New Way Criminals are Stealing Your Money
New Alert: Criminals use AI and voice cloning to trick you out of your money. Earlier this year, Microsoft unveiled...
‘Impossible to Spot’ Delivery Scam Email Targets Australia Post Customers – Don’t Fall Victim!
Unsuspecting shoppers should be cautious as a parcel delivery scam that is hard to distinguish targets Australia Post customers. Email...