InfoSecBulletin Cybersecurity for mankind
Google has released Chrome 129 for Windows, Mac, and Linux users. The update will be available gradually over the next few days and weeks.
The latest Chrome version (129.0.6668.58 for Linux, 129.0.6668.58/.59 for Windows and Mac) includes several improvements and important security fixes. This release focuses on security by fixing nine vulnerabilities that could be exploited by attackers.
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
500+ critical infrastructure hit by Medusa ransomware
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
Some fixes came from external security researchers, showing Google’s collaboration with the cybersecurity community to improve user safety.
Key security issues addressed include:
CVE-2024-8904: A severe type confusion vulnerability in V8, reported by Popax21 on September 8, 2024, could let attackers run arbitrary code in the browser.
CVE-2024-8905: A medium-severity vulnerability in V8, reported by Ganjiang Zhou of the ChaMd5-H1 team on August 15, 2024, received an $8,000 bounty.
CVE-2024-8906: An incorrect security UI issue in Downloads, reported by @retsew0x01 on July 12, 2024. This medium-severity flaw received a reward of $2,000.
Other vulnerabilities include insufficient data validation in Omnibox (CVE-2024-8907), improper implementation in Autofill (CVE-2024-8908), and UI issues (CVE-2024-8909), each with different severity levels and rewards.
Chrome 129 adds enhancements to improve user experience and performance, in addition to security patches. New features will be announced in future Chrome and Chromium blog posts. Google recommends that all users update their browsers to the latest version for better security and performance.
