If you’re running Google Chrome on any device – including a smartphone – make sure that you are running the latest version which fixes a security vulnerability (CVE-2019-5786) that can potentially be exploited by malicious webpages to hijack the software and run spyware, ransomware, and other nefarious code.
This type of vulnerability is particularly sneaky because the user doesn’t even need to click on anything. Simply visiting a webpage where a malicious advertisement is running is enough to become a victim.
Justin Schuh, Google Chrome lead, tweeted “Seriously, update your Chrome installs…like right this minute.”
The vulnerability affects Windows, Linux, Android, ChromeOS, and macOS builds of Chrome: if you’re running version 72.0.3626.121 or higher (or 72.0.3626.122 or higher on ChromeOS) then you’re all set. Open the Chrome menu, click on ‘Help’, then ‘About Google Chrome’ to check the version. From there you can update as necessary.
Normally, Chrome gets it updates automatically but we’ve seen quite a few instances – particularly on Android smartphones and tablets – where an update needs to be manually kicked off.
Everyone stay safe out there!