InfoSecBulletin Cybersecurity for mankind
Google has released a security update for Chrome that patches four high-severity vulnerabilities. The update is available for Mac, Linux, and Windows, and it will be rolled out over the next few days/weeks.
The vulnerabilities were discovered by three outside researchers, and they could have been exploited by attackers to take control of a user’s computer. Google has awarded bug bounties of up to $20,000 for the reports.
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
The vulnerabilities are:
- CVE-2023-3420: A confusion issue in V8.
- CVE-2023-3421: A use-after-free issue in media.
- CVE-2023-3422: A use-after-free issue in guest view.
Google uses a variety of security tools to find vulnerabilities in Chrome, including libFuzzer, AFL, Control Flow Integrity, AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, and UndefinedBehaviorSanitizer.
To update Chrome, open the browser and go to Help > About Google Chrome. If an update is available, it will be downloaded and installed automatically.
Different Release Channels
Chrome supports several different release channels. These channels allow Google to gradually roll out new features and security updates to users.
The stable channel is the most stable release channel, and it is recommended for most users. The beta channel is a bit more experimental, but it still receives regular security updates. The dev channel is the most experimental release channel, and it is not recommended for everyday use.
You can switch between release channels by going to Settings > Advanced > About and clicking the Change channel button.
Backing Up Your Profile
Before switching to a different release channel, it is a good idea to back up your profile. This will ensure that you do not lose your bookmarks, browsing history, and other settings.
To back up your profile, open the Chrome menu and go to Help > Troubleshooting Information. Click the Export profile button and save the file to a safe location.
If you ever need to restore your profile, you can import it by opening the Chrome menu and going to Help > Troubleshooting Information. Click the Import profile button and select the file you saved earlier.
