“This is not the first time Chrome has been targeted in this way,” he added. “Modern hardware-based securities are often bypassed by V8 vulnerabilities making this zero day that much more impactful. “Vulnerabilities in the V8 engine, such as type confusion errors, can make extremely powerful exploits,” he explained. That said, now the first Chrome Zero Day of 2023 is here, there is no time to waste.Ġ4/18 Update: speaking to me, Jake Moore, Global Cybersecurity Advisor at ESET, has warned about the dangers of the new Chrome Zero Day. For example, Google paid over $12M in bug bounties in 2022, including a single record bounty of $605,000 for one critical exploit. There are many reasons for this, but Google’s robust reporting system and payment of high bounties for vulnerabilities encourages security researchers to sell their discoveries to Google rather than hackers. In fact, Google warned users that it should expect the number of Zero Day attacks to continue to rise in March 2022, but consequently, the company has been incredibly successful in stemming the tide.
This progress is also no mean feat because Chrome’s dominance means it has by far the biggest target on its back of all browsers. To put this in perspective, Chrome had 15 Zero Day exploits in 2021 and nine in 2022, so the progress is clear. Google has done an incredible job patching Chrome vulnerabilities this year, and it is remarkable that we got to April before the first Zero-Day exploit occurred. Once the update is complete, you must restart the browser to be fully protected. This will force Chrome to check for browser updates. To do this, click the overflow menu bar (three vertical dots) in the browser's top right corner, then Help > About Google Chrome. The good news is Google now has a patch, and you need to update Chrome immediately to get it.
The vulnerability was discovered by Google’s Threat Analysis Group, but a patch couldn’t be created before the first exploits of Chrome began.
0 kommentar(er)
