What do You need to Know About the Google Chrome Vulnerabilities? How do stay safe?

 Have you updated your Google Chrome? Is it safe to browse on Google Chrome without the latest updates introduced by Google?

Recently Google introduced three vulnerabilities — CVE-2021–37974, CVE-2021–37975, and CVE-2021–37976 — which are all addressed by an urgent update for the Google Chrome browser. Google rate these vulnerabilities as dangerous and critical for users.

The biggest threat with these vulnerabilities is that amongst these three vulnerabilities, two have been already hacked by cybercriminals. This makes it crucial for users to update their Chrome.

To what extent these vulnerabilities are dangerous?

These two vulnerabilities, known as use-after-free class flaws (CVE-2021–37974 and CVE-2021–37975), take advantage of improper heap memory and result in the execution of arbitrary code on the targeted computer.

CVE-2021–37974 affects Google Chrome’s Safe Browsing component, which alerts users to dubious downloads and websites. This vulnerability has a 7.7 out of 10 severity rating according to CVSS v3.1.

Chrome’s V8 JavaScript engine was the source of the second vulnerability, CVE-2021–37975. With an 8.4 on the CVSS v3.1 scale, this one has been rated as the most dangerous of the three and a “critical” risk vulnerability. The attacks on Chrome users have already been made use of by unidentified criminals.

The third vulnerability, CVE-2021–37976, is brought on by Google Chrome’s core, which overexposes data. On the scale of CVSS v3.1, it rates significantly lower in hazard (7.2), but fraudsters are already using it.

How to stay safe from such Vulnerabilities?

Update your browser

Never forget to update your device. The best way to keep your system safe is to install the latest Google Chrome updates. Updates should be made to all devices that have Internet connectivity as the first step. Most of the time, the update is installed automatically when the browser is restarted.

However, as many users rarely restart their computers, their browsers may continue to be susceptible for a few days or even weeks. In any case, we suggest verifying

Chrome’s version. Here’s how to go about it:

Choose Help -> About Google Chrome by clicking the Customize and Control Google Chrome button in the browser’s top-right corner. Chrome will initiate the upgrade if your browser is not currently running the most recent version.

Turn your auto update ON

The best practice of internet browsers can save you and your device. Turning on automatic updates is a smart way to practice security hygiene. Make sure to update the software on your device as soon as possible because hackers rely on unpatched software to exploit flaws. Don’t allow any room for hackers to exploit your rights of privacy on the internet. Your good habits make you secure from cyber criminals.

Conclusion

Taking precautions is always wise. In the age of digitalization, one must be extremely alert and maintain all security measures. Installing K7 antivirus software is one such measure that one must practice to be safe online.K7 antivirus software protects your system from all such dangers and acts as a shield to your device. Knowing how to be protected from cyber threats is the most crucial aspect of online security.

https://www.k7computing.com/in/home-users?utm_source=referral&utm_medium=web_2_0&utm_campaign=web_2_0


Comments

Post a Comment

Popular posts from this blog

AMOS (MacOS Stealer)

  In the last week of April 2023, it was reported on twitter , that through a telegram channel a new malware was being offered as “Atomic MacOS Stealer”. Many samples of this malware were found on the internet. Figure 1 – Atomic MacOS Stealer Most of these samples were masquerading as an installer of various applications like Tor browser, Photoshop CC, Notion, FL studio. Figure 2 – Amos DMGfiles masquerading as different applications These are delivered as a DMGfile(Disk Image) which is the common format for software distribution & installation packages on macOS. We identified the Tor browser DMG file for the analysis. When we execute the DMG file it gets mounted and we can see the resulting window advises the user to execute the application by right clicking. Figure 3 – Tor Browser These fake applications are created by using Appify , which is used to create applications just by having the executable alone. The icons can be customised. That’s why these applications are in dif...
Read more

Ransomed by Warlock Dark Army “OFFICIALS”

  Recently we came across a tweet shared by petikvx . The tweet was on a ransomware family that had the group name similar to the WARLOCK DARK ARMY. The similarities with Chaos ransomware seem to end with the attacker group’s name. Upon analyzing the ransomware from the tweet we suspect both to be very different groups just based on their malware’s attributes. The sample under consideration was compiled using C/C++, in case of Chaos ransomware it is usually .Net. Statically looking at the file we noticed a resource entry under Bitmap with an identifier “14”, while analyzing the file code we noticed that this resource was read and loaded on to the memory. Hence we decided to dump that resource entry. Figure 1: Encrypted blob in resource section Figure 2 : Loading blob into the memory During our code analysis we found this blob was XOR encrypted. The first 16 bytes of this blob acts as the key for XOR decryption and the rest is the data which plays a key role in this ransomware’s in...
Read more

MuddyWater Back with DarkBit

  Recently, we came across a tweet about DarkBit ransomware. An Iranian APT group, named MuddyWater, is reportedly behind the DarkBit ransomware. In this blog we will explore the ransomware’s initial access method, the use of Cobalt Strike and the final ransomware payload. Initial Access Method The initial lure was delivered as an ISO file. Figure 1 – ISOFile The payload included a shortcut file (with a .doc extension) and a zip file. Figure 2 – Contents Inside ISO File The shortcut was using PrintBrm.exe to unpack the HR-Update.zip and run it as shown below. PrintBrm.exe is a windows inbuilt command line tool . Figure 3 – Shortcut File cmd.exe /c xcopy .\HR-Update.zip %TEMP% /h /y && PrintBrm.exe -r -f %TEMP%\HR-Update.zip -d %TEMP%\unzip & %TEMP%\unzip\HR-Update.exe Figure 4 – HR-Update.exe Running HR-Update.exe was a Cobalt Strike beacon. Cobalt Strike, a penetration testing tool, can also be used by attackers for gaining a foothold in the system. The final ran...
Read more