Mysterious Chrome 0-Day Out In Wild

[Gill Bates]

Recently...as in yesterday...came across a bunch of articles of a 0-Day exploit for Chrome being used in the wild.
This exploit consists of "tricking" the program (Chrome) that the data that is being sent is legit. Once the data has gone through, it then allows an attacker to remotely execute code.

To prevent a massive increase in attacks, Google is not disclosing the technical details behind the attacks. When companies do this, it usually means that its critical. Whoever found it is probably having a field day with it. Although it is a pretty severe 0-day, the solution is simple: update your Chrome.

TL;DR: New Chrome 0-day is pretty bad, but technical details on it are unavailable so far. Update your Chrome to fix this.

[deathbyroot]

this is good news. more hosts to exploit

[Gill Bates]

this is good news. more hosts to exploit

Meh, it would only be fun if the exploit details were out there and still unpatched. Google released updates for these already and all it takes to update is for someone to close their Chrome and re-open it again.

[Damosa]

All hail Firefox.