Google’s mysterious ‘search.app’ links leave Android users concerned

November 8, 2024 at 08:04AM Recent updates to the Google mobile app for Android have caused shared links to be prepended with a “search.app” domain, raising user concerns about potential malware. This domain, similar to other link redirectors, allows Google to gather analytics and block unsafe content, though its lack of documentation remains puzzling. **Meeting … Read more

Google Patches Critical Chrome Vulnerability Reported by Apple

October 30, 2024 at 05:32AM Google has addressed a critical vulnerability in Chrome (CVE-2024-10487), while Mozilla has resolved high-severity issues in Firefox. The updates ensure enhanced security for users of both browsers, following the report of the Chrome vulnerability by Apple. **Meeting Takeaways:** 1. **Patch Released for Chrome Vulnerability:** – Google has addressed CVE-2024-10487, classified … Read more

Chrome switching to NIST-approved ML-KEM quantum encryption

September 16, 2024 at 12:29PM Google is updating Chrome’s post-quantum cryptography to protect against TLS attacks using quantum computers and mitigate store-now-decrypt-later attacks by switching Kyber to Module Lattice Key Encapsulation Mechanism (ML-KEM). This strategic move to an approved mechanism resolves issues when transitioning to a NIST-approved system. The change will be implemented in Chrome … Read more

Android’s September 2024 Update Patches Exploited Vulnerability

September 4, 2024 at 05:36AM Google has released a new set of Android security updates addressing 35 vulnerabilities, including a high-severity local privilege escalation bug. The bug, tracked as CVE-2024-32896, was exploited in attacks and is addressed in the September 2024 Android security bulletin. The updates also resolve other high-severity flaws and issues in Framework … Read more

Google fixes ninth Chrome zero-day exploited in attacks this year

August 22, 2024 at 11:22AM Google released a new emergency security update for Chrome to patch a zero-day vulnerability exploited in attacks. The high-severity CVE-2024-7971 vulnerability in Chrome’s V8 JavaScript engine was reported by Microsoft researchers. The update (128.0.6613.84/.85) will be automatically rolled out to users, and manual updates can be initiated through the Chrome … Read more

Chrome 125 Update Patches High-Severity Vulnerabilities

May 22, 2024 at 06:30AM Google announced the release of Chrome 125 update addressing six vulnerabilities, including four high-severity bugs reported by external researchers. The update resolves issues such as use-after-free flaw, type confusion bug in V8 JavaScript engine, and heap buffer overflow problems. Google has paid out bug bounty rewards ranging from $5,000 to … Read more

Google rolls out Chrome fix for empty pages when switching tabs

May 21, 2024 at 11:00AM Google is addressing a known issue in Chrome browser where webpage content temporarily disappears when switching between tabs. A server-side fix is being deployed to resolve the issue, with affected users not needing to take any action. Restarting the browser may expedite the update process. Additionally, a previous warning about … Read more

Google fixes third actively exploited Chrome zero-day in a week

May 16, 2024 at 06:55AM Google issued an emergency Chrome security update to address a zero-day vulnerability, the third exploited in a week. The fix, released for Mac, Windows, and Linux, will automatically update Chrome, but users can verify by going to Help>About Google Chrome. The vulnerability, used in attacks, remains unpublicized as Google maintains … Read more

Chrome Zero-Day Alert — Update Your Browser to Patch New Vulnerability

May 10, 2024 at 07:00AM Google released security updates to fix a zero-day flaw (CVE-2024-4671) in Chrome actively exploited in the wild. The vulnerability involves use-after-free in the Visuals component, reported by an anonymous researcher on May 7, 2024. This is the second zero-day addressed by Google in 2024. Users are advised to upgrade their … Read more

Google teases a new modern look for sign-in pages, including Gmail

February 8, 2024 at 06:34AM Google is refreshing its sign-in pages, including Gmail, with a sleek, modern makeover. The update will embrace Material Design principles, signaling a significant aesthetic enhancement for a more user-friendly approach. This move aligns with Google’s efforts to modernize its interface across products and services, as seen with recent updates to … Read more