Google recently issued a critical security update for Chrome, patching up eleven security vulnerabilities, including two zero-day vulnerabilities that were exploited in the wild.
To celebrate the anniversary of its Vulnerability Reward Program and ensure the next 10 years are just as successful and collaborative, Google announced the launch of its new platform, bughunters.google.com. The new site brings all VRPs (Google, Android, Abuse, Chrome and Play) closer together and provides a single intake form that makes it easier for bug hunters to submit issues.
According to Menlo Security, Google Chrome users don't always take time to relaunch browser updates, and some legacy applications don't support new versions of Chrome.
Menlo Labs discovered that there are 49 different versions of Chrome being used by their customers as of November 17. Nearly two-thirds (61 percent) are running the latest build (.86) while just over a quarter (28 percent) are running one version prior (.85). Out of the customers running .86, a staggering 83 percent are running versions of Chrome that are vulnerable (
Google has admitted that its Home speakers recorded users at all times, even when they hadn't said "wake words" such as "OK Google," due to a security error earlier this year.
Following scrutiny for its data protection practices, Google will be taking an additional step to further guard user privacy by restricting the amount of data advertisers have access to.
The infamous demands for confidential records require no court approval and have previously come with a built-in gag order, but several rulings from the California have emboldened search giant Google to challenge the letters.
