Connect with us

Technology

Emergency Chrome security update amid cyber espionage threats

Published

on

Emergency Chrome security update amid cyber espionage threats

Google Chrome is the most popular browser in the world, and it is used by billions of people. However, its widespread usage also makes it a prime target for bad actors who exploit various methods, such as malicious extensions, phishing links and fake websites. The latest attack involves hackers exploiting a browser vulnerability to conduct espionage. Google has acknowledged the security flaw and has released an update to fix it.

Stay protected & informed! Get security alerts & expert tech tips – sign up for Kurt’s The CyberGuy Report now.

A man using Google Chrome on his laptop (Kurt “CyberGuy” Knutsson)

About the attack

Cybersecurity researchers at Kaspersky recently discovered a sophisticated cyber espionage campaign exploiting a previously unknown vulnerability in Google Chrome. The attack was triggered when victims unknowingly clicked on a phishing link in an email, launching a malicious site in their browser. Shockingly, no further action was required. Simply opening the link was enough to infect the system.

According to Kaspersky’s report, the malware was based on a zero-day vulnerability, later identified as CVE-2025-2783. Researchers say they analyzed the exploit, reverse-engineered its logic and uncovered that it allowed attackers to bypass Chrome’s built-in security features as if they didn’t exist.

Advertisement

The vulnerability exploited Chrome’s inter-process communication framework, known as Mojo, which is crucial for the browser’s functionality. This allowed the attackers to execute malicious code across different processes within Chrome, effectively bypassing its security measures.

“We have discovered and reported dozens of zero-day exploits actively used in attacks, but this particular exploit is certainly one of the most interesting we’ve encountered,” Kaspersky noted. 

The cybersecurity team also highlighted the stealthy nature of the attack, which primarily targeted media professionals, educational institutions and government agencies. Dubbed “Operation ForumTroll,” the campaign appeared to have espionage as its primary goal.

Google Chrome on a phone (Kurt “CyberGuy” Knutsson)

CLICKFIX MALWARE TRICKS YOU INTO INFECTING YOUR OWN WINDOWS PC

Advertisement

Google’s response to the attack

Once Kaspersky reported the vulnerability, Google released an emergency fix. The company has updated Chrome’s Stable channel for Windows, with the update gradually rolling out to users over the next few days and weeks. Meanwhile, the Extended Stable channel has also been updated.

As with most security updates, Google is keeping the details under wraps until the majority of users have installed the fix. This is a standard precaution to prevent other hackers from exploiting the flaw, while some users are still unprotected. If the bug also affects third-party software, Google will continue restricting details until those platforms release their own patches.

HACKED CHROME EXTENSIONS PUT 2.6 MILLION USERS AT RISK OF DATA LEAK

How to update Google Chrome

While the malware is affecting the Windows version of Google Chrome, it’s a good idea for everyone who uses Google Chrome to update their browsers. Below, we’ve listed steps to update the browser on Windows and other devices. To learn more about how to update other browsers like Safari, see my guide here.

 Windows

Advertisement
  • Open Chrome browser
  • At the top right, click More 
  • Click Help, then About Google Chrome
  • Select Update Google ChromeNote: If you do not see the “Update Google Chrome” button, then your browser is already updated
  • Click Relaunch to complete

Google Chrome update on Windows (Kurt “CyberGuy” Knutsson)

macOS

  • Open Google Chrome on your Mac
  • Click the three dots in the upper-right corner of the browser window
  • Navigate to HelpAbout Google Chrome from the dropdown menu
  • The browser will automatically check for updates. If an update is available, it will begin downloading immediately
  • Once the update is downloaded, click Relaunch to apply it
  • If the above steps fail, or you do not see the update option, visit google.com/chrome to download the latest version manually, then open the installer file and follow the on-screen instructions to install Chrome

iPhone/iPad

  • Open the App Store on your iPhone or iPad
  • Tap your profile picture in the top-right corner of the screen
  • Scroll down to Available Updates and look for Google Chrome in the list of apps with pending updates
  • If you see Chrome listed, tap the Update button next to it
  • If you don’t see Chrome under Available Updates, use the search bar at the top of the App Store and type Google Chrome, then tap on Google Chrome in the search results and check if an Update button is available. If so, tap it
  • Once updated, a small blue dot will appear next to Chrome’s app name on your home screen, indicating that it has been recently updated
  • You can also confirm that Chrome is up to date by reopening the App Store, scrolling down to Updated Recently and checking if Google Chrome appears there with today’s date

Android

 Settings may vary depending on your Android phone’s manufacturer. 

  • Open the Google Play Store app on your device
  • Tap your profile icon in the top-right corner of the screen
  • Select Manage apps & device from the menu
  • Under Updates available, tap See details to view a list of apps with pending updates
  • Locate Google Chrome in the list and tap the Update button next to it
  • If you don’t see Chrome listed under updates, search for Google Chrome in the Play Store search bar, then tap on Chrome in the results and check if an Update button is available. If so, tap it
  • Once updated, tap Open to launch the latest version of Chrome

OUTSMART HACKERS WHO ARE OUT TO STEAL YOUR IDENTITY

3 additional ways to protect your privacy

While updating Chrome should fix the vulnerability, below are some security tips you can follow to further bolster your privacy and security.

1) Have strong antivirus software: Hackers often gain access to devices by sending infected emails or documents or by tricking you into clicking a link that downloads malware. You can avoid all of this by installing strong antivirus software that will detect any potential threat before it can take over your device. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.

2) Enable two-factor authentication (2FA): Many online accounts, including Google, offer two-factor authentication as an extra security measure. Enabling 2FA ensures that even if a hacker obtains your password, they still need a second form of verification, such as a code sent to your phone, to access your account. This simple step significantly reduces the chances of unauthorized access.

3) Use a secure password manager: A strong password is crucial, but remembering multiple complex passwords can be difficult. A password manager generates, stores and autofills strong passwords for your accounts, reducing the risk of password-related breaches. Avoid using the same password across different sites and always opt for long, unique passwords. Get more details about my best expert-reviewed password managers of 2025 here.

Kurt’s key takeaway

This incident serves as yet another reminder that even the most secure systems are never truly invulnerable, especially when state-backed or highly skilled actors are in play. While Google’s quick response is commendable, it also highlights the never-ending cat-and-mouse game between security teams and cybercriminals. If you are using Chrome, update it now.

Advertisement

Do you think Google is doing enough to protect users from security threats? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels:

Answers to the most-asked CyberGuy questions:

Advertisement

New from Kurt:

Copyright 2025 CyberGuy.com. All rights reserved.

Advertisement

Technology

Microsoft will let you pause Windows Updates indefinitely, 35 days at a time

Published

on

Microsoft will let you pause Windows Updates indefinitely, 35 days at a time

Windows users will no longer be forced to run automatic updates in the middle of a game or a busy day. Microsoft is rolling out some long-awaited changes to Windows Update to users on its Dev and Experimental Windows Insider channels, including the ability to indefinitely delay updates up to 35 days at a time.

Last month, Microsoft announced a slew of upcoming changes to improve Windows 11 and address some of users’ most common complaints about the platform. Chief among the company’s planned fixes was making updates less disruptive. In its blog post on Friday, Microsoft says you’ll be able to “extend the pause end date as many times as you need” and that there are “no limits” on how many times you can reset to another 35-day window. If you don’t re-pause updates at the end of the 35-day period, updates will run as usual.

The changes to Windows Update also include more detailed titles for driver updates, which will now include the device class they apply to, such as display, audio, or battery.

Additionally, Windows 11 will now always have options in the power menu to restart or shut down without running updates, as well as the option to skip updates when setting up a new Windows device. Microsoft is also “unifying the update experience” to bunch together updates so users don’t have to reboot as frequently. Instead, “updates will download in the background, then will wait for a coordinated installation and restart.”

Continue Reading

Technology

Fox News AI Newsletter: Your next Dairy Queen order could be taken by AI

Published

on

Fox News AI Newsletter: Your next Dairy Queen order could be taken by AI

NEWYou can now listen to Fox News articles!

 

Welcome to Fox News’ Artificial Intelligence newsletter with the latest AI technology advancements.

IN TODAY’S NEWSLETTER:

– Dairy Queen’s new drive-thrus without humans spark backlash by frustrated customers

– Meta informs staff of layoffs affecting 8,000 employees amid AI push

Advertisement

– Fox News Poll: Voters see AI as a risk to privacy and paychecks

COLD OPEN: Dairy Queen’s new drive-thrus without humans spark backlash from frustrated customers – Fast-food chain Dairy Queen is moving toward new, fully automated AI drive-thrus operating without human workers.

TRUST DEFICIT: Fox News Poll: Voters see AI risk to privacy, paychecks – A Fox News Poll this week reveals growing anxiety among voters regarding artificial intelligence, with a significant portion expressing concerns that the rapidly advancing technology poses a direct threat to their personal privacy and future paychecks.

DIGITAL HEIST: White House accuses China of ‘industrial-scale’ AI technology theft ahead of Trump-Xi summit – Ahead of the highly anticipated summit between former President Donald Trump and Chinese President Xi Jinping, the White House has raised alarms over China’s industrial-scale theft of artificial intelligence technology.

CCP THEFT: Google engineer stole AI secrets for China, Senate hears explosive testimony – In explosive testimony before the Senate, lawmakers heard alarming details about a Google engineer accused of stealing closely guarded artificial intelligence secrets on behalf of China, highlighting national security risks.

Advertisement

CODE OR CRIME: Florida launches criminal probe into whether chatbot aided suspect in deadly campus shooting – Florida officials have launched a criminal probe to determine whether an artificial intelligence chatbot provided assistance to a suspect involved in a deadly campus shooting, demonstrating a novel challenge for law enforcement.

Fox News Digital spoke to Jack Schlossberg about his concerns that artificial intelligence is being used to overcharge consumers. (Fox News Digital)

FINE PRINT FURY: Schlossberg unveils plan to crack down on new frontier of AI putting squeeze on consumers – In a move to protect the public from emerging tech threats, Schlossberg has unveiled a comprehensive plan aimed at cracking down on the new frontier of artificial intelligence that is currently putting a financial squeeze on everyday consumers..

CODED MORALITY: Anthropic’s ‘moral compass’ architect suggested AI overcorrection could address historical injustices – The architect behind the “moral compass” at the AI firm Anthropic has controversially suggested that implementing an artificial intelligence overcorrection could serve as a mechanism to address historical injustices.

DIGITAL PREDATOR: Worker at swanky country club accused of using AI to create explicit photos of teen, police say – Police say a worker at an exclusive, swanky country club has been accused of utilizing artificial intelligence tools to generate explicit and inappropriate photographs of a teenager.

Advertisement

BOT BEHAVIOR: Expert rips ‘irresponsible’ AI study over blackmail scenarios – A leading technology expert is pushing back against a recent academic study outlining hypothetical artificial intelligence blackmail scenarios, ripping the research as highly “irresponsible” for stoking unnecessary public panic.

DOUBLE DOWN: Reese Witherspoon doubles down on AI comments, adds no one is paying her to say it – Hollywood actress Reese Witherspoon has doubled down on her controversial comments regarding the integration of artificial intelligence in the entertainment industry, emphatically adding that no one is paying her to endorse the technology.

EFFICIENCY DRIVE: Meta informs staff layoffs affecting 8,000 employees amid AI push – Amid a massive strategic pivot toward artificial intelligence, Meta has informed its staff of impending layoffs expected to affect approximately 8,000 employees as the tech giant restructures its workforce.

Meta CEO Mark Zuckerberg delivers a keynote speech at the Meta Connect annual event at the company’s headquarters in Menlo Park, Calif., on Sept. 25, 2024. (Manuel Orbegozo/Reuters)

ROBOTIC SHOTS: 49ers turning to artificial intelligence at NFL Draft, GM says laggards are already behind – The San Francisco 49ers are heavily integrating artificial intelligence into their scouting process ahead of the NFL Draft, with the team’s general manager warning that franchises failing to adopt the technology are already falling behind, according to Fox News Digital.

Advertisement

HANDS-FREE FEAST: Alexa lets you order food like a real conversation – Amazon’s Alexa is rolling out an updated artificial intelligence feature that enables users to order food by engaging in a seamless, real-time conversation with the virtual assistant.

FREE THROW BOT: Toyota’s CUE7 robot shoots hoops using AI – Toyota is showing off the impressive capabilities of its cutting-edge CUE7 robot, which utilizes advanced artificial intelligence algorithms to accurately shoot basketball hoops.

CUE7 sinks a free throw, a simple moment that reflects a bigger shift toward AI that learns through experience. (Toyota Motor Corporation)

Subscribe now to get the Fox News Artificial Intelligence Newsletter in your inbox.

FOLLOW FOX NEWS ON SOCIAL MEDIA

Facebook

Instagram

Advertisement

YouTube

X

LinkedIn

SIGN UP FOR OUR OTHER NEWSLETTERS

Fox News First

Fox News Opinion

Advertisement

Fox News Lifestyle

Fox News Health

DOWNLOAD OUR APPS

Fox News

Fox Business

Fox Weather

Advertisement

Fox Sports

Tubi

WATCH FOX NEWS ONLINE

Fox News Go

STREAM FOX NATION

Fox Nation

Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.

Advertisement

Continue Reading

Technology

I don’t think Gwyneth Paltrow knows what a peptide is

Published

on

I don’t think Gwyneth Paltrow knows what a peptide is

This is Optimizer, a weekly newsletter sent every Friday from Verge senior reviewer Victoria Song that dissects and discusses the latest gizmos and potions that swear they’re going to change your life. Opt in for Optimizer here.

These days, it seems I cannot escape peptides. Online, I’ve been assaulted by videos of shirtless Chads injecting dubiously sourced bottles of the so-called “Wolverine stack.” On the New York City subway, I’m haunted by Serena Williams’ Ro ads for easy GLP-1 access. Silicon Valley seems to be a parade of peptide parties. In Washington, RFK Jr. has said he’s pro-peptide and wants to expand access. In July, the FDA will meet to possibly reclassify 14 peptides so they can be eligible for compounding.

And in Hollywood, Gwyneth Paltrow — mother Goop, one of the original wellness influencers — is selling a series of peptide skincare products. Except, after some research, I’m not sure Paltrow actually understands what peptides are.

You might be wondering why I’m fixating on a Goop product in Optimizer. The short answer: While researching peptides for a forthcoming feature, I’ve descended into madness.

The longer answer is that peptide mania is central to Silicon Valley’s current fixation with longevity and metabolic optimization. As I’ve recently written, wellness trends increasingly inform new health tech features and gadgets that make up the wearable surveillance state. Peptides are also being framed on social media as an innovation that democratizes healthcare. (A similar rhetoric used to describe wearables!) It’s part of the wellness Wild West feedback loop that’s fueling Silicon Valley’s obsession with self-optimization. With that in mind, it’s worth examining how “peptide washing” has crept into various corners of the internet — and the resulting ripple effects.

Advertisement

While peptide shots are a relatively new trend, we’ve known about peptides and how they work for decades. They’re short chains of amino acids, which, in turn, make up proteins. In other words, building blocks for the building blocks. Because a peptide can be a chain ranging from two to roughly 100 amino acids, there are potentially trillions of peptides. Their main function is to act as messengers for various bodily functions. Some are naturally occurring and often come from the foods you eat. Others are made synthetically in a lab. The most famous ones include insulin and GLP-1 medications like semaglutide (Ozempic and Wegovy) and tirzepatide (Zepbound and Mounjaro).

What’s taking social media by storm are peptides that exist in legal gray areas. They’re not widely tested or FDA-approved drugs, and are sometimes sourced from dubious suppliers. I’ve previously written about retatrutide — another popular weight loss peptide — in Optimizer, but there’s a whole slew of others with names that sound vaguely like Star Wars droids. The most popular ones include BPC-157, TB-500, GHK-Cu, and CJC1295. These peptides are touted as biohacks for ailments ranging from fat loss and muscle growth, to faster wound healing, anti-aging, and increased energy. Essentially, everything associated with living a longer, healthier life. Lumped alongside these is NAD+, which is not a peptide but is often marketed as one. That’s partly because it’s frequently consumed as an IV drip and is thus an injectable substance.

But just because you can inject something, that doesn’t make it a peptide.

Do you have experience using peptides?

Or extremely strong feelings about this trend? I’m researching this phenomenon and I’d love to chat with you. Hit me up at victoria.song@theverge.com or on Signal at @ vicmsong.14.

Advertisement

NAD stands for nicotinamide adenine dinucleotide. It’s a coenzyme — basically an enzyme booster — that’s found in every cell. Its primary job is to help convert food into energy. It does this by shuttling electrons from one chemical reaction to another. As you age, your NAD levels naturally decline. This can lead to an array of conditions associated with aging, like Type 2 diabetes, lower energy levels, and saggy skin. Not to get too weedsy, but the + in NAD+ simply denotes one of two versions of the NAD molecule. (The other is NADH.)

Which, finally, brings me to the Goop Youth Boost NAD+ Peptide Rich Cream and whether Gwyneth Paltrow actually knows what a peptide is.

In my research, I was looking into influential people who have spoken out about peptide injections. There’s a long list, but in Hollywood, Paltrow’s name kept popping up. Cue this recent Elle interview, in which Paltrow plays a “fuck, marry, kill” game with wellness trends.

From the get-go, the Elle article incorrectly identifies NAD+ as a peptide. Paltrow is then quoted as saying she uses NAD+ IV drips and an injectable NAD+ pen for impromptu energy boosts. She goes on to say that injectable peptides dealing with inflammation and brain health that are “being formulated for longevity” will be the next NAD+. In the fuck, marry, kill game, Paltrow is asked to choose between NAD+, B12, and peptide shots. She refuses, saying she’d marry them all.

Note that the single actual peptide in this ingredient list is last. Meanwhile NMN isn’t actually NAD+.
Screenshot: Goop
Advertisement

What’s worrisome is the conflation of these treatments, even though they’re three separate things. It’s easy for the average person to read this article and think, “NAD+ is a type of peptide shot and a rich, glamorous celebrity like Gwyneth Paltrow does it, so this must be their secret to looking good.”

(For the curious: B12 is a vitamin. Supplementation can boost energy if you have a B12 deficiency, which is relatively common in the elderly, vegetarian, and vegan populations. As for NAD+, there’s considerable research interest, but limited clinical evidence for drips or supplements at the moment. I wrote a whole Optimizer newsletter about dubious peptide shots.)

From this interview, I get the sense that Paltrow knows that peptides are trendy, but she doesn’t actually admit to using any specific one. After some more digging, I found she has stated that she loves glutathione IV drips. Now, that is a peptide. However, she characterized her usage as “I love IV drips!” so, again, I’m not sure if Paltrow is aware that IV drips and peptides are not the same thing. Upon looking into her “peptide-rich” moisturizer, I’m even less certain.

Calling it a “Youth Boost NAD+ Peptide Rich Cream” would suggest this $105 moisturizer has both NAD+ and a bunch of peptides. Peruse the ingredient list, and you’ll find it doesn’t even have NAD+. It has NMN, or nicotinamide mononucleotide, a precursor (another kind of building block) for NAD+. As for its peptide content, the marketing claims the cream features “biomimetic plant-derived peptides.” Again, the list only refers to one true peptide molecule: arginine/lysine polypeptide. (A polypeptide is a longer peptide; this one supposedly helps with wrinkles.) It also appears last. In skincare, the ingredient list is generally ordered in terms of concentration. The top three to five ingredients make up the bulk of the formula. One hack is to find the so-called “one percent line”, which you can estimate from when the first preservative or fragrance appears. Given how this list is written, this is a standard moisturizer with a teeny sprinkle of a single peptide thrown in for marketing flavor. Even if there was a more potent amount, peptides are delicate molecules. Effectiveness for any topical skincare active — be it peptides or salmon sperm DNA — depends on stable formulation, concentration, whether the molecule can penetrate the skin barrier, and packaging that prevents degradation.

In any case, I reached out to Goop to clarify the peptide content in this cream. I have not heard back.

Advertisement

The only thing I can conclude is Paltrow isn’t afraid to try fringe wellness trends. (That and she loves an IV drip.) If someone handed her a peptide shot with the promise of energy and youth, I’d bet she’d do it. But do I think a peptide-curious person could ask her to explain the pros and cons of this trend based on her public statements? Now that’s a bet I would not take.

I could be wrong. In which case, I find her statements and her moisturizer to be disappointing given her status and influence. Case in point, the average person likely isn’t going to go through the trouble of accessing gray market peptide vials. They probably won’t be able to afford the same quality treatments as Paltrow, either. But a so-called peptide cream from a celebrity? That’s easily accessible. And in this particular case, that consumer wouldn’t be getting much of the thing they purportedly want to try.

More concerning is the flattening of any injectable as a peptide. Paltrow showing up to a podcast with an IV drip, speaking of peptides, phospholipids, and regular vitamins in a single breath? That’s confusing. It conflates relatively harmless therapies — like vitamin supplementation — with those that aren’t as well-studied. And the more influential people do this, the more regular people will too.

Peptides aren’t inherently dangerous. Injections aren’t evil. But the way peptide mania has made a more extreme, experimental trend as casual as taking a multivitamin? That feels like the slipperiest of slopes.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
Advertisement

Advertisement
Continue Reading
Advertisement

Trending