InfoSecBulletin Cybersecurity for mankind
Google has released Chrome 129 for Windows, Mac, and Linux users. The update will be available gradually over the next few days and weeks.
The latest Chrome version (129.0.6668.58 for Linux, 129.0.6668.58/.59 for Windows and Mac) includes several improvements and important security fixes. This release focuses on security by fixing nine vulnerabilities that could be exploited by attackers.
Ransomware hit Bangladeshi Globe Pharmaceuticals Ltd
Joint cybersecurity advisory
Botnet infects 260,000 SOHO routers, IP cameras with malware
Chrome 129 Released Fix with multiple Security Flaws
Broadcom fixed RCE bug in VMware vCenter Server
Cybercriminal now misuse Microsoft Azure tool to steal data
Apple warns users to install iOS 18 to Fix 33 iPhone Vulnerabilities
CISA adds windows and whatsUp Gold vuls to its KEV
Petroleum and Fuel Industry
FleetPanda exposes Nearly One Million Documents
DESCO faces cyber attack: Customers Data Breach
Alert! Google Fixes GCP Composer Flaw
Some fixes came from external security researchers, showing Google’s collaboration with the cybersecurity community to improve user safety.
Key security issues addressed include:
CVE-2024-8904: A severe type confusion vulnerability in V8, reported by Popax21 on September 8, 2024, could let attackers run arbitrary code in the browser.
CVE-2024-8905: A medium-severity vulnerability in V8, reported by Ganjiang Zhou of the ChaMd5-H1 team on August 15, 2024, received an $8,000 bounty.
CVE-2024-8906: An incorrect security UI issue in Downloads, reported by @retsew0x01 on July 12, 2024. This medium-severity flaw received a reward of $2,000.
Other vulnerabilities include insufficient data validation in Omnibox (CVE-2024-8907), improper implementation in Autofill (CVE-2024-8908), and UI issues (CVE-2024-8909), each with different severity levels and rewards.
Chrome 129 adds enhancements to improve user experience and performance, in addition to security patches. New features will be announced in future Chrome and Chromium blog posts. Google recommends that all users update their browsers to the latest version for better security and performance.
