Vulnerability – ITS News

Google recently released an advisory telling users to update their Chrome browser immediately due to a zero-day vulnerability. The flaw allows a specially-scripted page to read older file data in Chrome’s cache (the quick-read files that browsers store to speed things up). This could potentially expose personal information such as medical data, banking information, tax returns (’tis the season), and much more.

All that was the bad news – the good news is that Chrome updates itself by default, and it never asks you if you want to turn that off. Nevertheless, it’s worth a look to see if your Chrome installation has updated.

Users on Windows, Mac and Linux can access Chrome settings by visiting chrome://settings/help and checking to see if the version is up to date. You can also click on the Customize and Control icon (the three vertical dots in the upper right of the browser) and choose Help > About Google Chrome. If your browser has 72.0.3626.121 as the version, it is up to date (and will say so). If this isn’t your version, you can manually start a download.

As always, if you need assistance, please contact the Helpdesk at x1047, or open a ticket.

The vulnerabilities are being called Meltdown and Spectre, and they are very significant issues. They will require immediate and ongoing attention to secure your computing environment. While Widener ITS is working hard to address the issues with University equipment, everyone that has a personal computer, tablet, or smartphone needs to check with their manufacturer/carrier to find out what updates are available.

For your computer, you’ll first need to update your OS, likely either Windows or Apple (but other OS’s are vulnerable, too). Follow your standard method of patching (Windows Update or Apple AppStore Updates). NOTE FOR MAC USERS: we’re still asking you to avoid updating to High Sierra (version 10.13), so please look for the “Update All” button.

For your IOS device (iPad, iPod Touch, iPhone) you’ll go into Settings > General > Software Update. The AppStore will likely alert you, too.

For Android, this can vary, but should be found in Settings > System Updates. Android is usually good about putting updates in front of users quickly.

Browsers – every major browser (Chrome, Firefox, IE, Safari, and others) is being updated. The quickest way to update is usually through the Help > About section of your browser found using the control icon in the upper right corner.

This is a confusing issue, and that’s because it’s a big issue. Also, please be aware that scams around this will be out there soon. If you have any questions, please contact us at the Helpdesk at x1047 or at Helpdesk@widener.edu.

Tag: Vulnerability

Update Recommended for Chrome Browser

Meltdown and Spectre