BLUF

The past few weeks have been testing for Google as hackers continue to take advantage of Chrome vulnerabilities.

Summary

Google Chrome users have been warned that attacks on the browser are increasing, and multiple new hacks have been confirmed. Google has revealed that at least 25 new vulnerabilities have been discovered in November alone and rates seven of these as ‘High’ level threats. Several workarounds have been attempted, and disabling a new feature introduced in Chrome 96 has improved the security for some users. However, at this stage, it is unknown if Google can apply a fix remotely without releasing a new version of Chrome. If you are a Chrome user, this is what you need to know:

In response to these new threats, Google has released a major new update for Chrome, version 96.0.4664.45. 

However, Google states this will roll out over the coming days and weeks, which means you may not protect yourself immediately.

To check if you are protected, navigate to Settings > Help > About Google Chrome. 

If your Chrome browser is listed as 96.0.4664.45 or higher, you are safe. 

If the update is not yet available for your browser, make sure you regularly check for the new version.

It’s critically important to remember to restart your browser after updating to be protected. 

Restarting is often overlooked. So remember, Google’s fixes for high-level attacks are only effective if users restart their browsers.

For anyone hesitant to update, the carrot is that Chrome 96 also adds ‘back forward cache’, which accelerates page loading times by storing a version of your most recently visited page(s) in memory. 

References

Jun 2021 ZDNet Here's why you should restart Google Chrome at least once a week

Oct 2021 Forbes Google Critics Explain Why You Should Quit Chrome

Nov 2021 Mirror Google Chrome hacking alert as billions warned to update their browsers immediately

Nov 2021 ZDNet Windows 10 is a security disaster waiting to happen. How will Microsoft clean up its mess?