Google patches sixth Chrome zero-day attack of 2025 with urgent fix

Google has launched an pressing replace for its Chrome browser to repair a newly found zero-day security flaw that hackers are already exploiting. That is the sixth zero-day Chrome has confronted this 12 months, highlighting simply how rapidly attackers transfer to benefit from these hidden weaknesses. 

As a result of zero-day threats strike earlier than builders can patch them, your personal data and browsing activity might be in danger should you do not replace straight away. For those who use Chrome, now’s the time to improve.

Join my FREE CyberGuy Report
Get my finest tech suggestions, pressing safety alerts, and unique offers delivered straight to your inbox. Plus, you’ll get immediate entry to my Final Rip-off Survival Information — free once you be part of my CYBERGUY.COM/NEWSLETTER

GOOGLE CONFIRMS DATA STOLEN IN BREACH BY KNOWN HACKER GROUP

A crucial flaw in Chrome’s V8 engine

The newly patched vulnerability, tracked as CVE-2025-10585, stems from a sort confusion weak point in Chrome’s V8 JavaScript engine. Google’s Risk Evaluation Group (TAG) found and reported the bug on Tuesday, and the corporate shipped a repair the next day, Bleeping Laptop reported.

Google confirmed that the flaw was being exploited within the wild, although it didn’t share technical particulars or identify the teams behind the assaults. TAG has a historical past of uncovering zero-days tied to government-sponsored adware campaigns aimed toward high-risk people reminiscent of opposition leaders, journalists and dissidents.

The repair was delivered by way of Chrome model 140.0.7339.185/.186 for Home windows and macOS, and model 140.0.7339.185 for Linux. These updates will step by step attain all customers within the Secure Desktop channel over the approaching weeks.

Whereas Chrome usually updates routinely, you possibly can apply the patch instantly by navigating to the ‘About Google Chrome’ part. Google acknowledged that it’s withholding full technical particulars till most customers have put in the replace, a precaution meant to stop attackers from exploiting lagging techniques.

GOOGLE FIXES ANOTHER CHROME SECURITY FLAW BEING ACTIVELY EXPLOITED

Google races to patch the sixth main browser flaw found in 2025. (Kurt “CyberGuy” Knutsson)

A rising record of zero-day assaults in 2025

This marks the sixth zero-day flaw patched in Chrome this 12 months. In March, Google addressed CVE-2025-2783, a sandbox escape bug exploited in espionage assaults in opposition to Russian organizations. In Might, it pushed emergency updates for CVE-2025-4664, which let attackers hijack person accounts.

Then in June, one other flaw within the V8 engine, CVE-2025-5419, was patched after being noticed by TAG. July noticed the discharge of a repair for CVE-2025-6558, which allowed attackers to bypass Chrome’s sandbox safety. With this newest patch, Google continues a busy 12 months of racing to safe its browser in opposition to quickly rising threats. 

Easy methods to replace Google Chrome on a desktop

Updating Chrome solely takes a minute, whether or not you are on Mac or Home windows. Listed below are the steps.

• Open Chrome.
• Click on the three dots within the top-right nook.
• Go to Assist > About Google Chrome.
• Wait whereas Chrome checks for updates.
• Click on Relaunch when the replace finishes.

Easy methods to replace Chrome on iPhone

• Open the App Retailer in your iPhone.
• Faucet your profile icon within the top-right nook.
• Scroll right down to see pending updates.
• Discover Google Chrome within the record.
• Faucet Replace subsequent to it (or Replace All if you wish to replace every thing).

Easy methods to replace Chrome on Android

Settings could fluctuate relying in your Android telephone’s producer. 

• Open the Google Play Retailer in your Android gadget.
• Faucet your profile icon within the top-right nook.
• Choose Handle apps & gadget.
• Underneath “Updates out there,” search for Google Chrome.

Faucet Replace to put in the newest model.

CLICK HERE TO GET THE FOX NEWS APP

Hackers are already exploiting the bug to steal knowledge from unprotected gadgets. (Kurt “CyberGuy” Knutsson)

5 methods to remain protected from Chrome zero-day assaults

Updating Chrome is important, however there are extra steps you possibly can take to remain protected from assaults.

1) Be cautious with hyperlinks and downloads and use sturdy antivirus software program

Many zero-day assaults are delivered by way of malicious web sites or e-mail attachments. Keep away from clicking unknown hyperlinks or downloading information from unverified sources, particularly in the event that they immediate you to disable safety settings. Additionally, use sturdy antivirus software program so as to add one other layer of protection to detect malicious code that tries to run by way of compromised browsers. A powerful antivirus can spot suspicious exercise earlier than it takes maintain. This safety may provide you with a warning to phishing emails and ransomware scams, conserving your private data and digital belongings protected.

Get my picks for the very best 2025 antivirus safety winners in your Home windows, Mac, Android & iOS gadgets at Cyberguy.com/LockUpYourTech 

2) Allow two-factor authentication (2FA)

Even when attackers handle to steal your login particulars by way of a browser exploit, 2FA makes it a lot tougher for them to interrupt into your accounts. Use an authenticator app as an alternative of SMS when doable for stronger safety. 

3) Depend on a password supervisor

If attackers exploit the browser to steal login knowledge, a password supervisor retains your credentials protected and helps generate distinctive, complicated passwords. Even when one account is focused, it prevents a domino impact throughout your logins.

Subsequent, see in case your e-mail has been uncovered in previous breaches. Our #1 password supervisor (see Cyberguy.com/Passwords) choose features a built-in breach scanner that checks whether or not your e-mail tackle or passwords have appeared in identified leaks. For those who uncover a match, instantly change any reused passwords and safe these accounts with new, distinctive credentials. 

Take a look at the very best expert-reviewed password managers of 2025 at Cyberguy.com/Passwords

4) Restrict browser extensions

Some extensions might be abused to make assaults worse. Follow extensions from trusted builders, evaluation permissions fastidiously and uninstall something you not want.

5) Hold your working system up to date

Chrome updates are crucial, however attackers may exploit holes in Home windows, macOS, Android or iOS. Common OS updates patch vulnerabilities throughout the system, decreasing the probabilities of a browser exploit spreading additional. 

Kurt’s key takeaway

The truth that Chrome has already confronted six zero-day assaults this 12 months reveals how relentless attackers are and the way even the preferred software program can have severe gaps. These flaws usually are not simply bugs, however alternatives for hackers to use thousands and thousands of customers earlier than fixes roll out. The sample additionally highlights the rising sophistication of menace actors, together with state-backed teams concentrating on high-risk people. No browser is totally protected, and the battle to safe broadly used software program is ongoing and much from over.

Do you suppose Google is reacting quick sufficient to maintain your knowledge safe? Tell us within the feedback under. Tell us by writing to us at Cyberguy.com/Contact

Join my FREE CyberGuy Report
Get my finest tech suggestions, pressing safety alerts, and unique offers delivered straight to your inbox. Plus, you’ll get immediate entry to my Final Rip-off Survival Information — free once you be part of my CYBERGUY.COM/NEWSLETTER

Copyright 2025 CyberGuy.com.  All rights reserved.