Update your Google Chrome NOW – ‘Critical’ vulnerability patched by search giant could expose you to hackers

GOOGLE has disclosed a “critical” security flaw in its Chrome web browser that could expose users to cyber crooks.

The search giant is rolling out an update this week to fix the vulnerability that should distribute automatically to phones and PCs worldwide.

The latest Google Chrome update fixes a 'critical' security flaw — The latest Google Chrome update fixes a ‘critical’ security flawCredit: Alamy

It’s one of dozens of security holes fixed by Google in its Chrome 88 software update released on Tuesday.

The download also includes a number of stability and performance improvements, Google said.

The California tech titan listed 36 Chrome vulnerabilities mended by the update, which should reach people’s browsers in the coming days or weeks.

One, CVE-2021-21117, was marked as “critical”.

Hackers may be able to use the vulnerability to break into people's PCs — Hackers may be able to use the vulnerability to break into people’s PCsCredit: Getty Images – Getty

Critical flaws are generally those that require urgent fixing, typically because they expose the browser to malicious hackers.

Google did not go into detail on the nature of the issue, or what cyber sneaks could achieve if they exploited it.

It’s not clear whether hackers are thought to have utilised the vulnerability to break into people’s devices before it was patched.

To make sure you’re safe, all Google Chrome users are advised to update now. You can find instructions on how to do this below.

Google also highlighted nine patched security flaws that were marked as high priority, while the remaining 26 were either medium or low priority.

Chrome 88 adds a revamped “check passwords” section that will search for compromised or weak passwords you use.

The browser will highlight those you should change. Clicking the “change password” link takes you to the website so you can edit your logins.

The search giant said it has also made it quicker and easier to manage all of their login information within the password manager.

Commenting on the change, Jake Moore, a cybersecurity specialist at ESET, said Google was taking an important step toward encouraging users to bolster their online security.

How to stay safe from hackers

Protect your devices and networks by keeping them up to date: use the latest supported versions, use anti-virus and scan regularly to guard against known malware threats.
Use multi-factor authentication to reduce the impact of password compromises.
Tell staff how to report suspected phishing emails, and ensure they feel confident to do so, investigate their reports promptly and thoroughly.
Set up a security monitoring capability so you are collecting the data that will be needed to analyse network intrusions
Prevent and detect lateral movement in your organisation’s networks.

“Password security remains a huge challenge for organisations around the world and a massive threat to individuals too,” Moore said.

“One of the biggest challenges facing new users with a password manager is the thought of it taking them too long or being difficult to set up.

“Passwords are in desperate need of an overhaul therefore this new move by Google may be the first step in making things easier for people in using unique, strong passwords.”

How to update Google Chrome

On your computer, open the Google Chrome browser and click the More icon (three vertical dots) in the top right.

Click Update Google Chrome, or if that option isn’t there, it means you’re already using the latest version.

Once you’ve updated, click Relaunch.

The browser will save your open tabs and windows and re-open them when it restarts.

You can also restart your browser later on by clicking Not Now.

This will cause the update to be applied the next time you restart your browser.

The More icon will be coloured (1) green if an update has been available for two days, (2) orange if an update has been available for four days, or (3) red if an update has been available for seven days.

Chinese hackers said to be using the coronavirus pandemic to target US firms whose professionals are working from home