Connect with us

Tech

Act Now — Google Issues New Emergency Update For 3 Billion Chrome Users

Published

on


Updated October 23 with details of a Google Chrome for iOS browser app update alongside the emergency security update for all Windows, macOS, Linux and Android users.

If you are one of the 3 billion users of the Chrome web browser across the Windows, Mac, Linux and Android ecosystems, then you need to ensure you take note as Google issues the second emergency security update in the space of a week. Here’s everything you need to know about CVE-2025-12036, and how to get protected from the potential remote code execution attacks it can open unpatched users to.

ForbesSamsung Galaxy S25 Hack Confirmed — Camera And Tracking Accessed

Google Confirms Second Emergency Chrome Security Update In The Space Of A Week

No sooner has Google taken the unusual step of releasing a ‘single security fix’ update for all users of the world’s most popular web browser, than a second emergency update has been released to deal with yet another high-priority vulnerability that could leave users open to remote code attacks.

The latest update addresses CVE-2025-12036, a highly dangerous vulnerability that impacts the browser’s V8 JavaScript rendering engine, with the power to execute arbitrary malicious code with no further user input than visiting a compromised web page.

Srinivas Sista, from the Google Chrome team, has confirmed that the vulnerability was found by Google’s own AI-powered Big Sleep security resource. “Access to bug details and links may be kept restricted until a majority of users are updated with a fix,” Sista said, adding that the security fix will roll out to all users across “the coming days/weeks.”

Well, when Google says all users, it means everyone except for those who have the Chrome browser on their iPhones. As is always the case, which speaks volumes to the security of the device itself, there is no security update for iOS users. Of course, I have to say that it always amazes me that it is reported there are between 300 and 400 million people using Chrome on iOS, which equates to somewhere between 30 and 40 percent in total. Why anyone would opt for Chrome rather than the privacy-centric Safari browser app is beyond me, but hey ho. Google has, however, updated the Chrome iOS app to version 142.0.7444.46, but, Sista said, this only “includes stability and performance improvements.”

ForbesGmail Account Lockout Warning — Users Must Check This 1 Setting Now

How To Protect Google Chrome From CVE-2025-12036 Right Now

The good news is that it’s easy to protect your Google Chrome browser from the potential impact of CVE-2025-12036 immediately. To update your Chrome browser client to 141.0.7390.122/.123 for Windows and Mac, 141.0.7390.122 for Linux, and 141.0.7390.122 for Android, just follow these instructions.

As the update process is automated, once it has arrived in your browser, you should see a flag that lets you know it’s there. If you do not see this, then head for the settings menu and select About Google Chrome. This will kickstart the update process. Ensure you follow the instructions correctly, especially when it comes to relaunching your Chrome browser. If you do not, then the update will not be applied and won’t activate the security patch.

Android users should also note that, as I reported earlier this year, Chrome security updates would no longer be available to some 300 million devices as of August 5. The latest emergency update is a prime example of why ensuring that your device is both capable of, and actually is, running Android 10.0 or later. Earlier versions are the ones that no longer get security updates. Ellen T, a Chrome support manager at Google, has officially confirmed in a Google Chrome community posting that “Chrome 138 is the last version of Chrome that will support Android 8.0 and Android 9.0,” so you know what to do if that includes you!

ForbesUpdate Microsoft Windows Server, 10 And 11 Now — Attacks Underway



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

15 New Apple iPhone 17 And iPhone 17 Pro Cases To Protect Your Phone

Published

on


Now that the latest iPhones are out, you may want a case to go with it. After all, although the price increases predicted didn’t properly materialize, the iPhone is a valuable piece of kit.

Before you ask, last year’s cases don’t fit, and anyway, do you really want a year-old case on your brand-new phone?

Here are a dozen of the newest releases, and they come in varying styles, from wraparound wallets to high-protection sleeves. Choose from leather, Apple’s new TechWoven or a transparent case to show off the colorful phone within. Unless otherwise stated, all cases here are available for iPhone 17, iPhone 17 Pro and iPhone 17 Pro Max.

Look out for whether the case has an open section where the Camera Control sits, or a cover that still allows the pressure-sensitive and capacitive control to work.

The deals highlighted in this post were independently selected by the Contributor and do not contain affiliate links.


Smooth Leather Case

Nomad Modern Leather Case with Horween Leather

$75 from nomadgoods.com

Camera Control: Cover

California-based Nomad makes a wide range of products, including iPhone cases and a just-released Apple Watch Band. Horween leather is one of the options for the back cover of the Modern Leather case, though other leather options are also available, and are $20 cheaper.

Horween leather, especially, gains a unique patina the more it is used. The case is strong enough to survive an eight-foot drop, the company says. The bumpers are 2.2mm thick and they rise above the display at the corners for further protection. The edges have a concave finish, designed for extra grip.


Slim Protection

Pitaka Aramid ProGuard Case

$59.99 from ipitaka.com

Camera Control: Cover

Protection on the Pitaka cases partly comes from cushioning on the rear corners and partly from what’s described as aerospace-grade aramid fiber. The back is textured, to add extra grip.

Unlike some cases which have dealt with the complex needs of the Camera Control capacitive button, Pitaka has developed a cover that’s slim but responsive when you press or slide your finger on it.


Fashion-Forward Protection

Beats Rugged MagSafe Case

$79 from beatsbydre.com

Camera Control: Cover

Beats, the other brand that Apple owns, has a case that doesn’t look rugged. Rugged usually means bulky but the choice of colors, such as Sierra orange makes this case more style-focused. If orange is too much for you, Everest black and rocky blue will suit quieter tastes.

There’s a big lip over the edge of the display designed to keep it safe. The bottom half of the case, including the back and edges, is rougher to make it stay in your hand, while the top half is completely smooth.


Transparent Protection

Mous Clarity MagSafe

$69.99 from mous.co



Source link

Continue Reading

Tech

Is The Mystery iPhone Update Nearly Here?

Published

on


More than a week ago, the news was clear: the next iPhone update (the content of which remains a mystery) would be iOS 26.0.2 and would land in the week beginning Oct. 20. But it’s nowhere to be seen. What’s happening, you might ask.

It’s not that there were no Apple software updates last week. Anyone who bought the new iPad Pro, which went on sale on Wednesday, Oct. 22 alongside the latest MacBook Pro and Apple Vision Pro, had to update to a new version of iPadOS. But that was iPadOS 26.0.1 and was a new build for the latest model only.

ForbesApple iPhone 16 Pro Prices Slashed Further In New Sale

The iOS 26.0.2 update (and presumably iPadOS 26.0.2 if needed) could have arrived on Thursday, Oct. 23 or Friday, Oct. 24 — several reports thought that was likely.

Since it didn’t, we’re now in different territory. The next big update, until the rumor of iOS 26.0.2 had reared its head, was thought to be iOS 26.1. That’s so far into beta that it’s thought the release candidate will be available on Monday, Oct. 27 or Tuesday, Oct 28, with the general release expected the week after.

There are two options, it seems. Either Apple will kill off iOS 26.0.2 before it sees the light of day and instead go straight to iOS 26.1 on or around Monday, Nov. 3, or iOS 26.0.2 will appear first.

Which really only leaves Monday, Oct. 27 or Tuesday, Oct. 28 as likely days for release.

It’s not known exactly what will be in iOS 26.0.2, though it’s thought to address bugs and flaws, not launch new features which will be part of iOS 26.1.

So the fate of iOS 26.0.2 may rest on how urgent those fixes are and which handsets they affect.

My guess is that we will almost certainly see iOS 26.0.2 on Tuesday, Oct. 28, a day after the release candidate for iOS 26.1. I’d further guess that the fixes will mostly affect the iPhone 17 series or iPhone Air rather than all models.

If there’s no sign of it then, it looks like iOS 26.1 will be the next update, likely on Monday, Nov. 3. Look at it this way, there will probably be a new iPhone update in the next eight days at most.

I’ll update this post as soon as there’s more news, so please check back.

ForbesApple iPhone 18 Could See Major Change To Free Satellite Features, Report Says



Source link

Continue Reading

Tech

X Issues November 10 ‘Account Will Be Locked’ Twitter Security Warning

Published

on


Given the continuing popularity of Elon Musk’s X social network, and the swathing staffing cuts made when the world’s richest man bought what used to be (and still is in my mind) Twitter, it doesn’t make the cybersecurity headlines as much as you might have thought. With PayPal users currently warned of ongoing attacks, ditto WordPress website owners, and even LastPass password manager customers, all being in the threat actor crosshairs, this is a good thing. However, X users have now been warned that unless they make a change to a legacy Twitter security setting, they will be locked out of their accounts from November 10. Here’s what you need to know.

ForbesAct Now — Microsoft Issues Emergency Windows Update As Attacks Begin

The X Safety Team Issues Clarification After Warning Of Twitter Account Lockouts

Whatever you call it, X or Twitter, the social network isn’t immune to security threats. This year alone, I have reported on outages caused by a claimed DDoS attack and a warning for 650 million X users not to change their passwords. Sometimes, though, the perceived security threat comes from inside the building. Such was the case after the X safety team tweeted on October 24: “After November 10, if you haven’t re-enrolled a security key, your account will be locked until you: re-enroll; choose a different 2FA method; or elect not to use 2FA.”

This, rather unsurprisingly if you ask me, created a wave of concern amongst both ordinary users and security experts on the social media platform. One asked whether not using 2FA meant their account would remain active; another asked whether there had been a security breach; and another asked whether this only impacted passkey users?

ForbesGmail Account Lockout Warning — Users Must Check This 1 Setting Now

The confusion sat with X warning that “all accounts that use a security key as their two-factor authentication method to re-enroll their key to continue accessing X,” and adding that users could “re-enroll your existing security key, or enroll a new one.” A typical example of someone who knows what they are talking about but not how to communicate that in such a way to people who do not. Translating tech-speak into ordinary language is an essential skill and one that the X safety team appears to have misplaced on this occasion.

What X should have said, and ended up being forced into actually saying a day later, was: “To clarify: this change is not related to any security concern, and only impacts Yubikeys and passkeys – not other 2FA methods (such as authenticator apps). Security keys enrolled as a 2FA method are currently tied to the twitter.com domain. Re-enrolling your security key will associate them with x.com, allowing us to retire the Twitter domain. If this relates to you, you’ll be prompted automatically to re-enroll.”

ForbesOrganizations Can’t Deploy Passwordless, Declare Victory And Walk Away





Source link

Continue Reading

Trending