Connect with us

Tech

Act Now — Google Issues New Emergency Update For 3 Billion Chrome Users

Published

on


Updated October 24 with details of a new password stealer that can bypass the Google Chrome AppBound encryption protections, as well as further information concerning the emergency security update for all Chrome browser users, apart from the 400 million running the iOS app.

If you are one of the 3 billion users of the Chrome web browser across the Windows, Mac, Linux and Android ecosystems, then you need to ensure you take note as Google issues the second emergency security update in the space of a week. Here’s everything you need to know about CVE-2025-12036, and how to get protected from the potential remote code execution attacks it can open unpatched users to.

ForbesThe WhatsApp $1 Million Hack Mystery — What You Need To Know

Google Confirms Second Emergency Chrome Security Update In The Space Of A Week

No sooner has Google taken the unusual step of releasing a ‘single security fix’ update for all users of the world’s most popular web browser, than a second emergency update has been released to deal with yet another high-priority vulnerability that could leave users open to remote code attacks.

The latest update addresses CVE-2025-12036, a highly dangerous vulnerability that impacts the browser’s V8 JavaScript rendering engine, with the power to execute arbitrary malicious code with no further user input than visiting a compromised web page.

Srinivas Sista, from the Google Chrome team, has confirmed that the vulnerability was found by Google’s own AI-powered Big Sleep security resource. “Access to bug details and links may be kept restricted until a majority of users are updated with a fix,” Sista said, adding that the security fix will roll out to all users across “the coming days/weeks.”

Well, when Google says all users, it means everyone except for those who have the Chrome browser on their iPhones. As is always the case, which speaks volumes to the security of the device itself, there is no security update for iOS users. Of course, I have to say that it always amazes me that it is reported there are between 300 and 400 million people using Chrome on iOS, which equates to somewhere between 30 and 40 percent in total. Why anyone would opt for Chrome rather than the privacy-centric Safari browser app is beyond me, but hey ho. Google has, however, updated the Chrome iOS app to version 142.0.7444.46, but, Sista said, this only “includes stability and performance improvements.”

ForbesGmail Account Lockout Warning — Users Must Check This 1 Setting Now

New Google Chrome Browser Password Stealer Confirmed — What To Know

While Google has been diligently updating Chrome against the latest security threats, cybercriminals have also been busy updating threats that can impact users of the world’s most popular web browser client. Take, for example, the threat actors behind the Vidar Stealer malware-as-a-service platform that, newly published research has revealed, has just been updated to include the most advanced anti-analysis protections to thwart security protections, and, in the same vein, what have been described as sophisticate measures to ensure the malware can grab web browser credentials despite Chrome employing the latest AppBound encryption techniques to prevent this.

Trend Micro security researchers have now confirmed that “the developer known as ‘Loadbaks’ announced the release of Vidar Stealer v2.0 on underground forums.” This evolution of a platform that has been around since 2018, Trend Micro suggested, could be an attempt by its developers to position themselves to “occupy the space left after Lumma Stealer’s decline.”

The malicious actors behind Vidar Stealer v2.0, meanwhile, described it as being not just an update but a new era. As well as improvements in speed and stability, they claimed, it features “an automatic morpher,” making each and every build unique and helps sidestep the Chrome AppBound encryption protections. Trend Micro confirmed that binary analysis revealed the malware to be capable of comprehensive browser credential extraction capabilities, “targeting both traditional browser storage methods and Chrome’s latest security protections across multiple browser platforms, including Chrome, Firefox, Edge, and other Chromium-based browsers.”

Another of the changes is that it now uses a multi-threading system to adjust its performance based on the victim’s computer specifications, meaning it can scale operations easily “without overwhelming the target system.” Trend Micro said that this allows Vidar Stealer 2.0 to “steal data from multiple sources simultaneously – such as browsers, cryptocurrency wallets, and files – rather than processing them one at a time.”

I have reached out to Google for a statement. And will update the article in due course, should one be forthcoming.

ForbesSamsung Galaxy S25 Hack Confirmed — What You Need To Know

How To Protect Google Chrome From CVE-2025-12036 Right Now

The good news is that it’s easy to protect your Google Chrome browser from the potential impact of CVE-2025-12036 immediately. To update your Chrome browser client to 141.0.7390.122/.123 for Windows and Mac, 141.0.7390.122 for Linux, and 141.0.7390.122 for Android, just follow these instructions.

As the update process is automated, once it has arrived in your browser, you should see a flag that lets you know it’s there. If you do not see this, then head for the settings menu and select About Google Chrome. This will kickstart the update process. Ensure you follow the instructions correctly, especially when it comes to relaunching your Chrome browser. If you do not, then the update will not be applied and won’t activate the security patch.

Android users should also note that, as I reported earlier this year, Chrome security updates would no longer be available to some 300 million devices as of August 5. The latest emergency update is a prime example of why ensuring that your device is both capable of, and actually is, running Android 10.0 or later. Earlier versions are the ones that no longer get security updates. Ellen T, a Chrome support manager at Google, has officially confirmed in a Google Chrome community posting that “Chrome 138 is the last version of Chrome that will support Android 8.0 and Android 9.0,” so you know what to do if that includes you!

ForbesThis New iPhone Hack Could Make You $5 Million Richer



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

X Issues November 10 ‘Account Will Be Locked’ Twitter Security Warning

Published

on


Given the continuing popularity of Elon Musk’s X social network, and the swathing staffing cuts made when the world’s richest man bought what used to be (and still is in my mind) Twitter, it doesn’t make the cybersecurity headlines as much as you might have thought. With PayPal users currently warned of ongoing attacks, ditto WordPress website owners, and even LastPass password manager customers, all being in the threat actor crosshairs, this is a good thing. However, X users have now been warned that unless they make a change to a legacy Twitter security setting, they will be locked out of their accounts from November 10. Here’s what you need to know.

ForbesAct Now — Microsoft Issues Emergency Windows Update As Attacks Begin

The X Safety Team Issues Clarification After Warning Of Twitter Account Lockouts

Whatever you call it, X or Twitter, the social network isn’t immune to security threats. This year alone, I have reported on outages caused by a claimed DDoS attack and a warning for 650 million X users not to change their passwords. Sometimes, though, the perceived security threat comes from inside the building. Such was the case after the X safety team tweeted on October 24: “After November 10, if you haven’t re-enrolled a security key, your account will be locked until you: re-enroll; choose a different 2FA method; or elect not to use 2FA.”

This, rather unsurprisingly if you ask me, created a wave of concern amongst both ordinary users and security experts on the social media platform. One asked whether not using 2FA meant their account would remain active; another asked whether there had been a security breach; and another asked whether this only impacted passkey users?

ForbesGmail Account Lockout Warning — Users Must Check This 1 Setting Now

The confusion sat with X warning that “all accounts that use a security key as their two-factor authentication method to re-enroll their key to continue accessing X,” and adding that users could “re-enroll your existing security key, or enroll a new one.” A typical example of someone who knows what they are talking about but not how to communicate that in such a way to people who do not. Translating tech-speak into ordinary language is an essential skill and one that the X safety team appears to have misplaced on this occasion.

What X should have said, and ended up being forced into actually saying a day later, was: “To clarify: this change is not related to any security concern, and only impacts Yubikeys and passkeys – not other 2FA methods (such as authenticator apps). Security keys enrolled as a 2FA method are currently tied to the twitter.com domain. Re-enrolling your security key will associate them with x.com, allowing us to retire the Twitter domain. If this relates to you, you’ll be prompted automatically to re-enroll.”

ForbesOrganizations Can’t Deploy Passwordless, Declare Victory And Walk Away





Source link

Continue Reading

Tech

Google’s Pixel 10 Series Could Soon Receive A Significant Performance Boost

Published

on


Key Takeaways

  • Some Pixel 10 users have reported underperforming graphics and battery life.
  • Google has confirmed it will release driver updates, potentially addressing these issues and unlocking the Pixel 10’s full potential.
  • A new GPU driver update (version 25.2) is available that Google could deploy for significantly improved performance.

October 26 Update Below: A driver update may be essential for security reasons. This article was originally published on October 24

The Pixel 10 could soon receive a significant boost in performance, and potentially battery life, thanks to an upcoming graphics driver upgrade.

Reports indicate that the Pixel 10 series currently underperforms in graphics performance, notably scoring lower than the Pixel 9 Pro in some benchmark tests. The Pixel 10 series uses a PowerVR DXT-48-1536 GPU from Imagination Technologies, rather than the ARM Mali component found in previous models, which has led to complaints of poor performance, especially when playing popular, graphically intensive games such as Genshin Impact, and reduced battery life during video playback in apps like Netflix.

A primary cause of these performance issues appears to be an outdated GPU driver. The Pixel 10 shipped with driver version 24.3, lacking key features and optimizations necessary for the new GPU to reach its full potential. While it’s not unusual for a smartphone to ship with slightly older drivers, the switch from Mail to PowerVR appears to have exacerbated the issue.

A New GPU Driver Is Already Available

Fortunately, Imagination Technologies has since released driver version 25.2, adding official support for Android 16, along with significant performance enhancements, including support for the latest Vulkan 1.4 specification. That means this particular update could greatly benefit Pixel 10 users, and early indications suggest Google will most likely implement it.

A Google representative recently confirmed to Android Authority that the company plans to continue releasing GPU driver improvements in its regular system updates.

“We are continuing to improve driver quality in our monthly and quarterly system updates. For example, the most recent September and October patch releases included driver improvements. In future releases we are planning further GPU driver updates.”

Google has a strong track record in this area, having delivered a significant GPU performance boost for Pixel 8 Pro users in its December 2023 update, and several generations of Pixel smartphones received performance gains thanks to an updated GPU driver in the March 2025 Feature Drop. However, Google’s statement stops short of any commitment to any specific driver versions or performance benefits for the Pixel 10 range.

Google Pixel 10: Performance Upgrades Are Likely

If this pattern continues, Pixel 10 users can expect significant performance gains with future driver updates. Given that the new driver is already available from Imagination Technologies, we can hope it arrives sooner rather than later. For those currently experiencing graphics performance issues, a fix appears to be on the horizon.

October 26 Update: Existing vulnerabilities make a driver update extremely likely.

Driver updates typically offer not only performance improvements but also essential security patches, increasing the urgency of releasing updates.

The Pixel 10’s GPU driver is vulnerable, putting additional pressure on Google to provide an update.

According to Imagination Technologies’ published GPU Driver Vulnerabilities list, versions of the PowerVR GPU driver, up to and including version 24.3, currently deployed in the Pixel 10 series, contain critical vulnerabilities that could result in system instability, reboots and non-privileged access to secure data.

Addressing these vulnerabilities will be a high priority for Google, making a driver update urgent. Imagination Technologies doesn’t appear to have released any driver updates between versions 24.3 and 25.1, which fixes all of the listed vulnerabilities and adds most of the improvements listed in this article.

This means Google’s next Pixel 10 GPU driver update will likely be to least version 25.1, if not the latest version 25.2 released to partners on Oct 8. Pixel 10 Users can therefore expect significant improvements in performance, reliability and security once Google releases this update.

Follow @paul_monckton on Instagram.

ForbesNano Banana AI Image Editing Comes To Billions Of Google UsersForbesGoogle Photos’ New Update Leaves International Users Wanting More





Source link

Continue Reading

Tech

Edifier Unveils Upgraded S880DB MKII Active Speakers For Hi-Res Performance

Published

on


Edifier is a speaker brand that’s rapidly building a reputation for producing premium mid-range speakers that sell for very affordable prices. Edifier has just announced the launch of the S880DB MKII, its fully upgraded successor to the brand’s acclaimed S880DB model. This latest version features enhanced acoustic performance, redesigned circuitry and an improved user experience.

The S880DB MKII speakers now feature a completely upgraded driver system that can produce a richer and more precise sound. The tweeters have been upgraded to a 1.25-inch titanium dome model with a 25mm voice coil and neodymium magnet. The output through the tweeters is 12W per channel. The previous model used a 1-inch tweeter, so the improvements deliver clearer and more transparent highs that offer more accuracy and detail.

Complementing the upgraded tweeters are a pair of redesigned 3.75-inch mid-bass drivers with an output of 32W per channel for a clearer sound across the entire mid-range. The woofers also provide an extended low-frequency response that goes as low as 50Hz for a fuller and richer bass response. The overall sound of the upgraded drivers is a more solid and balanced soundstage.

High-Quality Sound

At the heart of the new S880DB MKII speakers are high-performance chipsets sourced from Texas Instruments. Edifier has used the powerful XMOS XU216 onboard processor, which provides advanced digital audio processing and can support high-resolution audio playback up to 24-bit/96kHz, for clearer sound and ultra-low distortion.

The S880DB MKII speakers are designed to meet and exceed the specifications required to gain Hi-Res Audio certification. The speaker’s digital interfaces support resolutions up to 24-bit/192kHz, while the Texas Instruments analog front end operates at 24-bit/96kHz, for precise signal handling and clarity across the entire frequency range.

At the rear of the S880DB MKII’s primary speaker unit are all the inputs for connecting the speakers to a digital or analog source. Users can choose from two RCA line-in connectors, a digital coax and optical inputs, plus a USB-C port, which is ideal for connecting these speakers to a computer so they can be used on a desk setup. There’s no 3.5mm input, but a cable is provided that goes from 3.5mm to RCA.

Bluetooth Connectivity

Finally, these speakers also include a Bluetooth 5.3 receiver for wireless input. The S880DB MKII speakers support the LDAC audio codec with transmission rates up to 990kbps, which means high-resolution wireless audio streaming up to 24-bit/96kHz.

Using the LDAC codec ensures audiophile-grade sound quality over Bluetooth from compatible Android devices running Android 8.0 and higher. Anyone using the speakers with a Mac or iPhone could use a Bluetooth dongle that supports LDAC. In addition, the speakers also support the vanilla SBC codec, but not AAC. The sound of these speakers can be shaped using the three rotary controls at the rear of the primary unit. The three knobs control volume, treble and bass.

The S880DB MKII also includes a dedicated SUB OUT port for the connection of an external subwoofer — like Edifier’s recently announced T5S model — and an even deeper bass response. This feature provides a fuller and more immersive low-end that’s suitable for music, movies and gaming. The one thing missing is a front-mounted headphone jack, which a lot of people use for private listening when seated at their computer.

User-Friendly Controls

Controlling the speakers is easy using the included puck-shaped remote control, which is just as well because those rear-mounted controls aren’t particularly convenient to reach. The S880DB MKII speakers come with a newly designed and rechargeable 2.4GHz remote control for quick access to playback and volume levels.

On the front of the primary speaker is an integrated OLED display featuring auto-dimming and providing clear and real-time feedback without too much glare. The speakers are also fully compatible with Edifier’s ConneX smartphone app, which can be used to fine-tune settings and manage the source inputs directly from a smartphone’s screen.

Pricing and Availability:

The Edifier S880DB MKII speakers are available now for $399.99 from Amazon.com.

Tech Specs:

  • Total output power (RMS): Treble: 12W x 2 / Mid-low: 32W x 2.
  • Drivers: 3.75″ long-throw aluminum diaphragm / 1.25″ titanium diaphragm dome tweeters.
  • Frequency response: 50Hz – 40kHz.
  • Signal-to-Noise ratio: ≥ 85dB(A).
  • Audio inputs: USB-C, Optical, Coaxial, Line In 1, Line In 2, Bluetooth.
  • Input sensitivity: USB-C: 500 ± 50mFFS OPT: 500 ± 50mFFS, COAX: 500 ± 50mFFS, Bluetooth: 500 ± 50mFFS, Line In 1: 500 ± 50mV, Line In 2: 700 ± 50mV.
  • Bluetooth: V5.3.
  • Supported audio codecs: SBC, LDAC.
  • Dimensions (W x H x D): 145 x 237 x 207mm (Primary speaker) /145 x 237 x 192mm (Passive speaker).
  • Weight: 6.27kg.



Source link

Continue Reading

Trending