The National Information Technology Development Agency (NITDA) has issued an urgent alert regarding a critical security vulnerability found in the Google Chrome browser. The flaw, identified as CVE-2024-797, was recently discovered by Google and is reportedly being actively exploited by cyber attackers.

This vulnerability, classified as a “type confusion” flaw, is located in Chrome’s V8 JavaScript engine, which is crucial for processing JavaScript files. The flaw arises from the browser’s misinterpretation of data types, resulting in memory corruption.

Consequently, attackers could exploit this vulnerability to execute malicious programs on devices that have not been updated to the latest version of Chrome.Through its Emergency Readiness and Response Team (CERRT), NITDA has warned of severe consequences if the vulnerability is not addressed.

“The vulnerability enables attackers to potentially take full control of affected systems by exploiting memory corruption caused by the misinterpretation of data types. This could allow attackers to bypass security protocols, execute malicious code, and even cause system crashes. The vulnerability is particularly dangerous because it can be triggered simply by visiting a malicious website,” NITDA stated.

To mitigate this threat, NITDA urges all Google Chrome users to immediately update their browsers to the latest versions: 128.0.6613.84/.85 for Windows and macOS, and 128.0.6613.84 for Linux. Users can check for updates by going to the Chrome menu, selecting “Help,” and then clicking on “About Google Chrome” to apply any available updates.

The agency also advises users of Chromium-based browsers, such as Microsoft Edge, Brave, Opera, and Vivaldi, to apply the necessary updates as soon as they become available.

NITDA emphasizes that timely updates are essential to protect against potential exploits and ensure the security of personal and organizational systems. This warning is the latest in a series of alerts about escalating cyber threats targeting internet users in Nigeria and worldwide.

The increasing number of security advisories issued by cybersecurity agencies in recent months reflects the growing sophistication and frequency of cyber attacks.

Exploiting browser vulnerabilities has become a common tactic among cybercriminals to infiltrate systems and steal sensitive information.As cyber threats continue to evolve, NITDA underscores the importance of maintaining up-to-date software and implementing proactive cybersecurity measures to safeguard against these ongoing risks.

The post NITDA Issues Urgent Warning Over Critical Google Chrome Vulnerability appeared first on Tech Digest News.

TECHDIGEST- Employees and business owners who continue to utilize an outdated version of Windows and Google’s Chrome browser must now upgrade.

That’s because Google will stop providing technical and security support for the Windows 7-based browser tomorrow.

READALSO: Nairobi to Host Africa Tech Summit 2023

Due to Covid-19, Google originally intended to end support on July 15, 2021, but it postponed the date first to January 15, 2022, and subsequently to January 10, 2023.

The final Chrome version to support Windows 7 and Windows 8/8.1 is version 109. The first Chrome version to require Windows 10 or later is Chrome 110, which is tentatively scheduled for release on February 7th, 2023, according to Google’s Chrome Support Manager.

The post Google Chrome to Stop Working Properly on Millions of Windows PCs appeared first on Tech Digest News.

TECH DIGEST – Despite a poor reputation for privacy, Google’s Chrome browser continues to dominate. The web browser has around 65 per cent market share and two billion people are regularly using it. Its closest competitor, Apple’s Safari, lags far behind with under 20 per cent market share. That’s a lot of power, even before you consider Chrome’s data collection practices.

Is Google too big and powerful, and do you need to ditch Chrome for good? Privacy experts say yes. Chrome is tightly integrated with Google’s data gathering infrastructure, including services such as Google search and Gmail – and its market dominance gives it the power to help set new standards across the web. Chrome is one of Google’s most powerful data-gathering tools.

Google is currently under fire from privacy campaigners including rival browser makers and regulators for changes in Chrome that will spell the end of third-party cookies, the trackers that follow you as you browse. Although there are no solid plans for Europe yet, Google is planning to replace cookies with its own ‘privacy preserving’ tracking tech called FLoC, which critics say will give the firm even more power at the expense of its competitors due to the sheer scale of Chrome’s user base.

Chrome’s hefty data collection practices are another reason to ditch the browser. According to Apple’s iOS privacy labels, Google’s Chrome app can collect data including your location, search and browsing history, user identifiers and product interaction data for “personalisation” purposes.

Google says this gives you the ability to enable features such as the option to save your bookmarks and passwords to your Google Account. But unlike rivals Safari, Microsoft’s Edge and Firefox, Chrome links this data to devices and individuals.

Although Chrome legitimately needs to handle browsing data, it can siphon off a large amount of information about your activities and transmit it to Google, says Rowenna Fielding, founder and director of privacy consultancy Miss IG Geek. “If you’re using Chrome to browse the internet, even in private mode, Google is watching everything you do online, all the time. This allows Google to build up a detailed and sophisticated picture about your personality, interests, vulnerabilities and triggers.”

When you sync your Google accounts to Chrome, the data slurping doesn’t stop there. Information from other Google-owned products including its email service Gmail and Google search can be combined to form a scarily accurate picture. Chrome data can be added to your geolocation history from Google Maps, the metadata from your Gmail usage, your social graph – who you interact with, both on and offline – the apps you use on your Android phone, and the products you buy with Google Pay. “That creates a very clear picture of who you are and how you live your life,” Fielding says.

As well as gathering information about your online and offline purchases, data from Google Pay can be used “in the same way as data from other Google services,” says Fielding. “This is not just what you buy, but also your location, device contacts and information, and the links those details provide so you can be identified and profiled across multiple datasets.”

Google’s power goes even further than its own browser market share. Competitor browsers such as Microsoft’s Edge are based on the same engine, Chromium. “So under the hood they are still a form of Chrome”, says Sean Wright, an independent security researcher.

Google’s massive market share has allowed the internet giant to develop web standards such as AMP in Google mobile search, which publishers must use in order to appear at the top of search results. And more recently, Chrome’s FLoC effectively gives Google control over the ad tracking tech that will replace third-party cookies – although this is being developed in the open and with feedback from other developers.

Google’s power allows it to set the direction of the industry, says Wright. “Some of those changes are good, including the move to make HTTPS encryption a default, but others are more self-serving, such as the FLoC proposal.”

Google says its Ads products do not access synced Chrome browsing history, other than for preventing spam and fraud. The firm outlines that the iOS privacy labels represent the maximum categories of data that can be gathered, and what is actually collected depends on the features you use in the app, and how you configure your settings. It also claims its open-source FLoC API is privacy-focused and will not give Google Ads products special privileges or access.

Google says privacy and security “have always been core benefits of the Chrome browser”. A Google spokesperson highlighted the Safe Browsing features that protect against threats such as phishing and malware, as well as additional controls to help you manage your information in Chrome. In recent years the company has introduced more ways you can control your data. “Chrome offers helpful options to keep your data in sync across devices, and you control what activity gets saved to your Google Account if you choose to sign in,” the spokesperson says.

But that doesn’t change the level of data collection possible, or the fact that Google has so much sway, simply through its market dominance and joined up ad-driven ecosystem. “When you are a company that has the majority share of browsers and internet search, you suddenly have a huge amount of power,” says Matthew Gribben, a former GCHQ cybersecurity consultant. “When every web developer and SEO expert in the world needs to pander to these whims, the focus becomes on making sites work well for Google at the expense of everything else.”

And as long as people use Chrome and other services – many of which are, admittedly, more user friendly than those of rivals – then Google’s power shows no signs of diminishing. Chrome provides Google with “enormous amounts of behavioural and demographic data, control over people’s browsing experience, a platform for shaping the web to Google’s own advantage, and brand ‘capture’”, Fielding says. “When people’s favourite tools, games and sites only work with Chrome, they are reluctant to switch to an alternative.”

In theory, competition and data protection laws should provide the tools to keep Google from getting out of control, says Fielding. But in practice, “that doesn’t seem to be working for various reasons including disparities of wealth and power between Google and national regulators”. Fielding adds that Google is also useful to many governments and economies and it is tricky to enforce national laws against a global corporation.

There are steps you can take to lock down your account, such as preventing your browsing data being collected by not syncing Chrome, and turning off third-party cookie tracking. But note that the more features you use in Chrome, the more data Google needs to ensure they can function properly. And as Google’s power and dominance continues to surge, the other option is to ditch Chrome altogether.

If you do decide to ditch Chrome, there are plenty of other feature-rich privacy browser options to consider, including Firefox, Brave and DuckDuckGo, which don’t involve giving Google any of your data.

Source:Wired

The post It’s Time To Ditch Chrome appeared first on Tech Digest News.