BOLO: Google has released an urgent security update for Chrome to address a critical zero-day vulnerability, identified as CVE-2024-4671. This vulnerability is a "use-after-free" issue within Chrome's visual component, which could allow remote attackers to execute arbitrary code on an affected system just by visiting a malicious website. This flaw is actively being exploited in the wild, making it essential for both Mac and Windows OS users to update their browsers immediately to protect against potential attacks.

While this alert should be troubling, Chrome users and users who use Chrome-based browsers, e.g., Brave, Microsoft Edge, and Opera, should also be aware that this is the seventh of eight security warnings this year (with four of the alerts just this month). It is imperative that you regularly check that your software is up to date from zero-day software vulnerabilities.

Word/Phrase of the Week – What is a “Zero-Day” vulnerability?  A "zero-day" security flaw refers to a software vulnerability that is unknown to the software's developers or the public. Because the developers are unaware of the flaw, there is no patch or fix available. The term "zero-day" highlights that there are zero days between the discovery of the vulnerability and its exploitation, meaning the flaw can be exploited by attackers immediately after its discovery. This makes zero-day vulnerabilities particularly dangerous, as they can be used to launch attacks before any defense or mitigation can be implemented.

How To update Chrome:  Users should go to the menu (three dots in the upper-right corner) on your browser window, select "Help," then "About Google Chrome," and follow the instructions to install the update and relaunch the browser. This update also impacts other Chromium-based browsers, see above, which should also be updated as soon as possible to mitigate this security risk.

Happy Lawyering and Stay Safe Out There!