Govt issues high risk warning for Google Chrome users and you should not miss it
The Indian Computer Emergency Response Team (CERT-In) has issued a high-risk warning for Google Chrome desktop users. In its latest vulnerability note tagged CIVN-2025-0130, the national cybersecurity agency under the Ministry of Electronics and Information Technology has flagged multiple vulnerabilities in Chrome. These flaws, if exploited, could allow remote hackers to gain access to users' computers and even crash the machines.advertisementAccording to CERT-In, the recently discovered vulnerabilities exist in Google Chrome versions prior to 137.0.7151.119/.120 for Windows and Mac, and prior to 137.0.7151.119 for Linux. These flaws arise from an integer overflow in Chrome's V8 JavaScript engine and use-after-free errors in the Profiler component.This means that users still running the vulnerable version of the Google Chrome browser could, by unknowingly visiting a malicious or specially crafted web page, allow a remote attacker to exploit these flaws to run harmful code on their system or cause it to crash. This exploitation could also result in serious harm, including sensitive data theft, complete system compromise, or service disruption — all without the user's knowledge.
CERT-In has marked the warning as High in severity, meaning these vulnerabilities in Google's web browser are particularly serious and could have major consequences if exploited. The risks include:advertisementRemote code execution: Attackers could gain control of the user's system.Denial of Service (DoS): PCs may become unresponsive or crash completely.Information disclosure: Users' sensitive data on the affected machine could be accessed or leaked.The threat is alarming to both individual users and organisations relying on Chrome for daily operations. All desktop users of Google Chrome — whether on Windows, macOS, or Linux as mentioned above — are at risk if they are using outdated versions.How to stay safe?To protect your system, CERT-In strongly recommends that users immediately update their Chrome browser to the latest stable version provided by Google. The official update has already been released. 'The Stable channel has been updated to 137.0.7151.119/.120 for Windows and Mac, and 137.0.7151.119 for Linux, which will roll out over the coming days/weeks,' notes Google in its recent Stable Channel Update for Desktop.If your system is not set to auto-update, you can manually check and update Chrome:Open the Google Chrome browser.Click the three-dot menu () in the top right corner.Go to Help > About Google Chrome.Chrome will automatically check for updates and install them if available.Restart the browser to apply changes.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Mint
15 minutes ago
- Mint
What is digital services tax Canada just scrapped after Donald Trump called it ‘egregious'?
Canada has rescinded its digital services tax targeting U.S. technology firms in a bid to advance trade negotiations with the U.S., Canada's finance ministry said in a statement on Sunday, days after U.S. President Donald Trump called off trade talks. 'Canadian Prime Minister Mark Carney and Trump will resume trade negotiations in order to agree on a deal by July 21, 2025,' the ministry said. On Friday, Trump abruptly cut off trade talks with Canada over its tax targeting U.S. technology firms, saying that it was a "blatant attack" and that he would set a new tariff rate on Canadian goods within the next week. Canada's Digital Services Tax Act (DSTA) officially came into force on June 28, 2024, imposing a 3% tax on digital service revenues generated from Canadian users, even if companies have no physical presence in the country. The first payments are due on Monday, June 30, 2025, according to a report by Al Jazeera. Initially proposed during the 2019 federal election under Prime Minister Justin Trudeau, the law targets large tech companies with global revenues over $820 million and Canadian revenues exceeding $14.7 million. Unlike traditional corporate taxes based on profit, this tax is levied on gross revenues tied to user engagement in Canada, the report said. The tax applies to a range of digital services, including online marketplaces, Social media platforms, Digital advertising, Sale or licensing of user data. The tax was 3% of the digital services revenue a firm takes in from Canadian users above $20 million in a calendar year, and payments will be retroactive to 2022, the Al Jazeera report said. US President Donald Trump said on Friday that he's suspending trade talks with Canada over its plans to continue with its tax on technology firms, which he called 'a direct and blatant attack on our country.' Trump, in a post on his social media network, said Canada had just informed the U.S. that it was sticking to its plan to impose the digital services tax, which applies to Canadian and foreign businesses that engage with online users in Canada. The tax is set to go into effect Monday. 'Based on this egregious Tax, we are hereby terminating ALL discussions on Trade with Canada, effective immediately. We will let Canada know the Tariff that they will be paying to do business with the United States of America within the next seven-day period,' Trump said in his post. Based on this egregious Tax, we are hereby terminating ALL discussions on Trade with Canada, effective immediately. The digital services tax will hit companies including Amazon, Google, Meta, Uber and Airbnb with a 3% levy on revenue from Canadian users. It will apply retroactively, leaving U.S. companies with a $2 billion U.S. bill due at the end of the month. Canada is the second-largest U.S. trading partner after Mexico, and the largest buyer of U.S exports. It bought $349.4 billion of U.S. goods last year and exported $412.7 billion to the U.S., according to U.S. Census Bureau data. (With inputs from agencies) Key Takeaways Canada's digital services tax aimed at large tech companies faced backlash from the U.S. The decision to rescind the tax was influenced by trade negotiation dynamics with the Trump administration. Understanding international trade relations is crucial for countries implementing new tax regulations.
Time of India
43 minutes ago
- Time of India
US-Canada trade talks resume: PM Carney revokes tax on US tech firms; Trump had called off talks over 'digital tax'
Canadian Prime Minister Mark Carney on Monday said trade talks with the United States have resumed after his government "rescinded its plan to tax American technology firms". The move by Ottawa comes after US President on Friday suspended trade talks with the neighbouring nation over its plans to continue with its tax on US tech firms, which he called "a direct and blatant attack on our country". Tired of too many ads? go ad free now Canadian finance minister Francois-Philippe Champagne said his government anticipated "a mutually beneficial comprehensive" trade arrangement with Washington. "...Canada would rescind the Digital Services Tax (DST) in anticipation of a mutually beneficial comprehensive trade arrangement with the United States," a government statement said, according to news agency AP. It added that Trump and Canadian PM Carney "have agreed that parties will resume negotiations with a view towards agreeing on a deal by July 21, 2025." Trump, in a post on his social media network last Friday, said Canada had just informed the US that it was sticking to its plan to impose the digital services tax, which applies to Canadian and foreign businesses that engage with online users in Canada. The tax was set to go into effect today. On Friday, Trump came down hard on Canada over its to decision to impose a Digital Services Tax (DST) on American technology companies, calling it a "direct and blatant attack" on the United States. In a post on his social media platform Truth Social, Trump announced the immediate suspension of all trade discussions with Canada the same day. In a sharply worded statement, Trump declared that the US would soon impose tariffs on Canadian goods. 'We will let Canada know the tariff that they will be paying to do business with the United States of America within the next seven-day period,' the post warned. Canada's digital services tax, first proposed years ago, is aimed at ensuring that large multinational tech firms, many of which are US based, pay taxes on revenues generated from Canadian users. The policy has drawn criticism from US lawmakers and trade officials who argue it disproportionately targets American companies like Google, Amazon, and Meta.
The Hindu
44 minutes ago
- The Hindu
Tech firms warn 'Scattered Spider' hacks are targeting aviation sector
Tech companies Google and Palo Alto Networks are sounding the alarm over the "Scattered Spider" hacking group's interest in the aviation sector. In a statement posted on LinkedIn on Friday, Sam Rubin, an executive at Palo Alto's cybersecurity-focused Unit 42, said his company had "observed Muddled Libra (also known as Scattered Spider) targeting the aviation industry." In a similar statement, Charles Carmakal, an executive with Alphabet-owned Google's cybersecurity-focused Mandiant unit, said his company was "aware of multiple incidents in the airline and transportation sector which resemble the operations of UNC3944 or Scattered Spider." Neither executive identified which specific companies had been targeted, but Alaska Air Group-owned Hawaiian Airlines and Canada's WestJet have both recently reported being struck by unspecified cyber incidents. Neither company has gone into detail about the intrusions or commented on any potential links between the incidents and Scattered Spider. The loose-knit but aggressive hacking group, alleged to at least in part comprise youngsters operating in Western countries, has been blamed for some of the most disruptive hacks to hit the United States and Europe in recent memory. In 2023, hackers tied to the group broke into gaming companies MGM Resorts and Caesars Entertainment, partially paralysing casinos and knocking slot machines out of commission. Earlier this year, the group wreaked havoc at British retailers. More recent targets include the U.S. insurance industry.
