Google has released a Security Advisory on Monday July 4th where they detailed a new release of Chrome for Windows users, specifically Chrome 103.0.5060.114. This quickly put together update addresses a high-severity zero-day vulnerability that has already been exploited by attackers in the wild pages of the internet.
What exactly is this security flaw?
Unfortunately, Google has not released any information about what this security flaw might affect, nor what the attackers who have already exploited the flaw did with it. In Google's Security Advisory published about this flaw, they are quoted saying, "Access to bug details and links may be kept restricted until a majority of users are updated with a fix." It looks like until more people have been able to download this update for their Chrome browser, Google will not release any information about this security exploit. A very smart move on their part, since details about what this flaw may contain could attract more potential attackers, and there are still a large number of users who's browser were not updated, so they will still be at risk. You can read through the whole official update from Google here. Be on the lookout for more information about the security flaw from Google in the coming days, and be sure to check back in with the KCS Wizard as we will be releasing updates on this ongoing event as more information becomes available.
How can I download this update?
Here is a bit of good news, Google Chrome updates get pushed through automatically once your browser receives them! Google is saying that since they are still rolling out the update, not everyone will be given the ability to update just yet, however it should only take a matter of days or weeks for the update to reach the entire userbase. If you would like to manually check whether or not the update is available for your Chrome browser, simply follow the instructions listed below;
1. Navigate over to the Three (3) dot menu in the top right corner of your browser.
2. Hover over the menu item "Help".
3. Click on "About Google Chrome".
4. Let Chrome scan for a new update if it needs to.
5. If a new update is found, click the "Relaunch" button to restart Chrome with the new update!
As of writing and publishing this blog, the Chrome update was available for us to download. Check to see if you have it already!
Sources: https://www.bleepingcomputer.com/news/security/google-patches-new-chrome-zero-day-flaw-exploited-in-attacks/
