Google plugs Chrome zero-day exploited in the wild

08 March, 2019, 08:54 | Author: Patty Hardy
  • Google Patches Zero-Day Flaw in Chrome Under Active Attacks

Google has warned owners of Windows and Mac computers have been told to urgently update their Chrome internet browser, after learning that hackers may have exploiting a mystery bug that has existed since its launch. Updated versions of Chrome have also been released for Android and Chrome OS.

All Chrome users have been advised to use the browser's built-in update tool to update Chrome to the latest update in order to avoid future issues with the bug.

We also know that it was reported by Clement Lecigne of Google's Threat Analysis Group a week ago (on February 27). Basically, the vulnerability is said to let malicious code escape Chrome's security sandbox, allowing an attacker to run malicious code on the victim's machine.

Google is calling this a "zero-day" vulnerability, meaning that the bad guys figured out how to exploit it before the good guys were able to find and patch it.

Three Canadian Radio Stations Pull Michael Jackson’s Music, Citing Abuse Allegations
Mediaworks would not comment on when Jackson's music might return to airwaves, saying they "will be guided by their audience". Jackson was again accused of child molestation by 13-year-old Gavin Arvizo and went to trial over it in 2005.

"The vulnerability is a NULL pointer dereference in win32k!MNGetpItemFromIndex when NtUserMNDragOver () system call is called under specific circumstances", he added. To make matters worse, Google said the exploit was being actively used before the company fixed it.

Chrome users are urged to check their browser to confirm they are running version 72.0.3626.121. That's a departure from many Chrome patches, which work as soon as they're installed.

"This newest exploit is different, in that initial chain targeted Chrome code directly, and thus required the user to have restarted the browser after the update was downloaded", Schuh wrote.

What Biehn is referencing is that Google Chrome is created to update automatically, with users rarely if ever noticing.

Recommended:

  • Brie Larson Sums Up Captain Marvel in One Word

    Brie Larson Sums Up Captain Marvel in One Word

    Captain Marvel is one of the most-anticipated films of 2019 - and is one of the most established brands in the comics world. They were believed to be a backlash to comments she made about film journalists being overwhelmingly white and male.
    The Jonas Brothers Drink Bird Saliva

    The Jonas Brothers Drink Bird Saliva

    Another tough question James asked was to rank boy bands from best to worst: The Backstreet Boys, N'Sync, One Direction, and BTS. I would go with Nick and Pri, just because if they're paying, it's going to be fantastic ".
    French 'voices of Isis' killed in strikes on Syria

    French 'voices of Isis' killed in strikes on Syria

    Around 90 people, mostly children under the age of five, have died en route to the shelter or shortly after arriving, OCHA said. Effective July 2018, access to full reports will only be available with a subscription.
  • Apex Legends Balance Patch Nerfs Peacekeeper and Wingman

    Apex Legends Balance Patch Nerfs Peacekeeper and Wingman

    While we've made small adjustments, we're hopeful that increasing the power of large rigs is healthier than nerfing everyone else. As for character balance, Respawn said it looks at a combination of factors, including pick rate, win rate, and player feedback.
    Indestructible Four-Legged Robots Can Do Backflips Now

    Indestructible Four-Legged Robots Can Do Backflips Now

    They are now working on a landing controller so that the robot would be able to steadily land on its feet after a big throw. Its party trick is performing a 360-degree backflip, but the robot's speed and agility are its most impressive features.
    Amazon to close all US  pop-up stores

    Amazon to close all US pop-up stores

    Amazon Books now has locations in 10 states and Washington, D.C., but they intend to expand over the coming year. Amazon's pop-up store at the Queens Center mall in Elmhurst, New York, in late 2016.
  • Western countries condemn Saudi Arabia for Khashoggi's death

    Western countries condemn Saudi Arabia for Khashoggi's death

    HRW's Geneva director John Fisher called it "a landmark step toward justice" and urged "more scrutiny" of the country. Activists can and should play "a vital role in the process of reform which the Kingdom is pursuing", it said.
    Mark Zuckerberg Outlines New Plan to Build 'Privacy-Focused' Facebook

    Mark Zuckerberg Outlines New Plan to Build 'Privacy-Focused' Facebook

    The organization also contacted Facebook and urged them to change their SDK to prevent data collection without consent. Zuckerberg explained that Facebook aims to one day move from public posts to encrypted, ephemeral communications.
    Movie Characters Who Were Perfectly Cast (The Second Time)

    Movie Characters Who Were Perfectly Cast (The Second Time)

    Next up for Elba: he will be hosting Saturday Night Live for the first time on March 9. There were exactly two good things about the otherwise very bad Suicide Squad movie.
  • USA  looking at new sanctions against Venezuela: U.S

    USA looking at new sanctions against Venezuela: U.S

    Guaido says Maduro's presidency is illegitimate after he secured re-election previous year in a vote widely considered a sham. He returned to Venezuela Monday after a trip overseas to rally support from the global community.
    Google Duplex! Now in 43 States on All Pixel Phones

    Google Duplex! Now in 43 States on All Pixel Phones

    In related news, Google did say that they plan to "slowly" bring Duplex to more Android and iOS devices over the "next few weeks". What you need to know is that the Assistant will always identify itself when making a call, and the calls will be recorded.

    PS4 System Software Update 6.50 Brings Remote Play to iOS and More

    Remote Play - which lets players use a mobile device to control their PS4 console - has been a long time coming for iOS users. A little while back, you may remember hearing that beta invites were being sent out for PlayStation 4 firmware update 6.50.


Popular

Hospital workers in Chicago reportedly fired for accessing Jussie Smollett's records
The workers were terminated for gaining access to the actor's medical chart when he visited the hospital's emergency room. The Chicago Police Department wants to find out who may have leaked information in the Jussie Smollett case.

Santa Anita suspends racing after 21 horses die, report says
The announcement came hours after the death of 4-year-old filly Let's Light the Way , the Los Angeles Times reported. According to the Los Angeles Times , only seven horses had died up to February 26 at Santa Anita past year .

Israel spacecraft sends 'selfie' on maiden mission to moon
A touchdown would make Israel the fourth country to pull off a moon landing. Beresheet is scheduled to land on the Moon on April 11. Beresheet is Hebrew for "in the beginning".

Starbucks adds a cloud-topped coffee drink
The Cloud Macchiato is available in both the United States and Canada, and will come in two different flavors. Starbucks and Ariana Grande had fans curious when they began tagging each other in cloud-themed posts .

Alabama judge allows teen to sue on behalf of aborted fetus
Finally, the law frees the state of Alabama from being required to secure the right or funds required to attain an abortion. In November Alabama voters passed a constitutional amendment saying there is no right to an abortion in the state.

Charlotte Russe closing all stores; liquidation sales start Thursday
Charlotte Russe , founded in 1975 and based in San Francisco, is a retail company offering trendy clothing for women. Payless ShoeSource and clothing retailer Gymboree both have followed that path to recent months.

Disney announces opening dates for Star Wars: Galaxy's Edge
Galaxy's Edge will open at Disneyland on May 31st and at Walt Disney World on August 29th. The release also calls these dates "Phase One" of the opening.

Gayle King interviews 2 women who are reportedly dating R. Kelly
His attorney entered not guilty pleas in that case for him, and on CBS , Kelly demonstratively maintained he is innocent. Kelly as one who preyed on young girls and women who were hoping to get their big break in the music industry.

Tesla's V3 Supercharger cuts down charging times by half
The push will take Tesla's network to delivering 250 kilowatts, up from 120 kw as more fast-charging infrastructure is built. Tesla specifically mentions this in 2019.7.11's release notes.

Nintendo Labo VR Kit Arrives April 12, 2019
In a surprise to practically everyone , Nintendo announced a virtual reality Labo kit for the Switch - and it's out April 12. Strictly speaking there is just one dedicated VR kit, the Toy-Con 04 VR Kit, but it will be available in two configurations.