If you want to know when the Google Chrome update deadline is after a succession of zero-day vulnerabilities in May, we will share all you need to know with you.
Google Chrome went through a very troubled period last month. While the vulnerabilities in question threatened the security of users, the US government warned federal employees to install updates or stop using Chrome.
It then tried to close the vulnerabilities by quickly releasing updates. But even though Chrome updates automatically, users still need to close and restart the browser for the update to be fully applied.
When is the Google Chrome update deadline (2024)?
While urgent Chrome updates are currently halted, it is important for organizations to post reminders and continue to implement automatic update processes. Home users should not neglect updates either. Google announced that according to the June 3 and June 6 deadlines set by CISA, two known vulnerabilities have been exploited in the wild and, therefore, released emergency updates.
On June 3rd, a Bitcoin trader allegedly lost $1 million after Chrome security cookies were stolen from his system to bypass login and 2FA credentials. This incident and the Manifest V2 news may prompt users to delay their updates or update immediately. However, both approaches would be wrong. The attack was allegedly caused by a malicious plugin that leaked session cookies from the user’s computer and copied login credentials on another device. This is not a Chrome vulnerability that any patch can fix.
Users must be careful with the plugins and extensions they install on their computers. Every app installed can be a potential threat. Also important is the way Chrome works. Session cookies allow users to be remembered when they visit a site again. However, if these cookies are stolen, the user’s secure session can be duplicated on a different device. Google is prototyping a new web feature called Device-Bound Session Credentials (DBSC) to solve this problem.
Things to watch out for
- Emergency updates: Install the emergency updates Chrome released in May now.
- Suspicious plugins: Be careful with the add-ons and extensions you install on your computer and only download apps from trusted sources.
- Session cookies: Be aware of the risk of stolen session cookies and follow Google’s new security feature DBSC.
- Security awareness: Practice safe browsing habits and avoid clicking on suspicious links.
The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal government employees about critical vulnerabilities discovered in the Google Chrome browser. In a statement stating that the vulnerabilities are being actively exploited, employees were instructed to update their browsers to the latest version or stop using Chrome.
Users on older systems that do not support Chrome updates should uninstall the browser completely. The deadlines for two other zero-day vulnerabilities (CVE-2024-4947 and CVE-2024-5274) discovered in May are June 10 and June 16. It is stated that these vulnerabilities carry similar risks.
Despite its security vulnerabilities, Google Chrome remains the world’s most popular internet browser. However, users need to follow updates and be careful to ensure their security.
Featured image credit: Barış Selman
