Comments
Google has released the latest update for its Chrome Browser version 88.0.4324.150 which fixes a security issue that is being actively exploited in the wild.
The update is being rolled out for Windows, Mac and Linux over the coming days/weeks, Google said.
The tech giant has fixed a security bug with a high severity rating as part of the update. It did not provide much details about the vulnerability dubbed CVE-2021-21148.
“Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed,” it said.
The vulnerability described only as a “Heap buffer overflow in V8,” was reported by a researcher named Mattias Buelens on January 24.
As ZDNet notes, a few days after Buelens’ report, Google’s Threat Analysis Group posted an article about an active campaign against security researchers by North Korean hackers.
“Over the past several months, the has identified an ongoing campaign targeting security researchers working on vulnerability research and development at different companies and organisations,” TAG’s Adam Weidemann said in a blog post.
“The actors behind this campaign, which we attribute to a government-backed entity based in North Korea, have employed a number of means to target researchers,” Weidemann said.
TAG researchers are yet to confirm the mechanism of compromise as at the time and the vulnerability that was being exploited as the researchers targeted had been using fully patched and up-to-date Windows 10 and Chrome browser versions.
Anyone with information on Chrome vulnerabilities, including those being exploited in the wild (ITW) is eligible for reward payout under Chrome's Vulnerability Reward Program, the group had said.
Regardless of the exact vulnerability being patched, users are advised to update to the latest version of the browser to ensure security.
Comments
COMMENT NOW
Comments
Comments have to be in English, and in full sentences. They cannot be abusive or personal. Please abide by our community guidelines for posting your comments.
We have migrated to a new commenting platform. If you are already a registered user of TheHindu Businessline and logged in, you may continue to engage with our articles. If you do not have an account please register and login to post comments. Users can access their older comments by logging into their accounts on Vuukle.