{"id":1183,"date":"2025-11-19T16:31:28","date_gmt":"2025-11-19T21:31:28","guid":{"rendered":"https:\/\/www.montclair.edu\/phish-files\/?p=1183"},"modified":"2026-02-17T10:32:56","modified_gmt":"2026-02-17T15:32:56","slug":"critical-security-alert-chrome-based-web-browsers","status":"publish","type":"post","link":"https:\/\/www.montclair.edu\/phish-files\/2025\/11\/19\/critical-security-alert-chrome-based-web-browsers\/","title":{"rendered":"Critical Security Alert: Required Update for All Chrome-Based Web Browsers"},"content":{"rendered":"

What is happening?<\/h2>\n

A critical security flaw has been discovered in Google Chrome<\/strong> that is currently being used by hackers to attack devices.<\/p>\n

The Risk:<\/strong><\/h3>\n

Simply visiting a malicious website can allow attackers to get access to your accounts through the web browser.<\/p>\n

The Impact:<\/strong><\/h3>\n

This can lead to the theft of your passwords, access to your logged-in accounts (like email or banking), or the installation of malicious software.<\/p>\n

This affects Windows, Mac, and Linux computers and Android mobile devices. <\/strong>We recommend everyone update their web browsers immediately to stay safe.<\/p>\n

Note:<\/strong> University-owned devices will update automatically. Just follow any on-screen prompts if your computer asks you to confirm or restart.<\/p>\n

\n

Action Required: Follow the steps for your device below<\/strong><\/h2>\n

1. Windows & macOS Users (Laptop\/Desktop)<\/strong><\/h3>\n

Applies to: Google Chrome, Microsoft Edge, Brave, Opera<\/em><\/p>\n

For Google Chrome:<\/strong><\/h4>\n
    \n
  1. Open Chrome.<\/li>\n
  2. Click the three vertical dots (\u22ee)<\/strong> in the top-right corner.<\/li>\n
  3. Select Help > About Google Chrome.<\/strong><\/li>\n
  4. The browser will automatically check for updates.<\/li>\n
  5. CRITICAL:<\/strong> Once the download finishes, click the “Relaunch” <\/strong>button. The update is not active until you restart the browser.<\/li>\n<\/ol>\n

    For Microsoft Edge:<\/strong><\/h4>\n
      \n
    1. Click the three dots (…)<\/strong> in the top-right.<\/li>\n
    2. Go to Help and feedback<\/strong> \u2192\u00a0About Microsoft Edge.<\/strong><\/li>\n
    3. Wait for the update to install, then click Restart.<\/strong><\/li>\n<\/ol>\n

      Verification: <\/strong>After restarting, go back to the “About” page. It should say “Chrome is up to date” (Version 142.0.xxxx<\/strong> or higher).<\/p>\n

      \n

      2. Android Users (Samsung, Pixel, etc.)<\/strong><\/h3>\n

      Applies to: Chrome on Android<\/em><\/p>\n

        \n
      1. Open the Google Play Store<\/strong> app on your phone.<\/li>\n
      2. Tap your Profile Icon<\/strong>\u00a0(top right corner).<\/li>\n
      3. Tap Manage apps & device.<\/strong><\/li>\n
      4. Tap Updates available.<\/strong><\/li>\n
      5. Find Google Chrome<\/strong> in the list and tap Update.<\/strong><\/li>\n<\/ol>\n

        Note: If you use Microsoft Edge on Android, update that as well.<\/em><\/p>\n

        FAQ<\/div>
        \n

        What is the Chromium vulnerability everyone is talking about?<\/strong><\/h3>\n

        A recently discovered security flaw in Chromium (the engine behind Chrome, Edge, Brave, etc.) could allow attackers to run harmful code or steal information if a user visits a malicious website. The browser makers have released a security patch to fix it.<\/span><\/p>\n

        Does this affect Chrome, Edge, and other browsers, or just one?<\/h3>\n

        It affects any browser built on Chromium \u2014 this includes Google Chrome, Microsoft Edge, Opera, Brave, and others. All of them need to be updated.<\/span><\/p>\n

        What does this vulnerability allow attackers to do?<\/h3>\n

        If exploited, an attacker could potentially crash your browser, run unauthorized code, or redirect you to malicious content. In most cases, exploitation requires visiting a harmful website.<\/span><\/p>\n

        Does this vulnerability put my university account or data at risk?<\/h3>\n

        Potentially \u2014 if your browser is out of date and you visit a malicious site, attackers may attempt to exploit the bug. Updating your browser fully protects you.<\/span><\/p>\n

        Is this connected to phishing or malware we\u2019ve seen on campus?<\/h3>\n

        Not directly. However, attackers often combine browser vulnerabilities with phishing or fake links, so staying updated helps reduce your risk overall.<\/span><\/p>\n

        Could my computer be compromised if I use campus Wi-Fi?<\/h3>\n

        No \u2014 the Wi-Fi isn\u2019t the issue. The risk comes from running an outdated browser. Updating your browser eliminates the vulnerability regardless of where you connect.<\/span><\/p>\n

        How do I know if my Chrome\/Edge browser is up to date?<\/h3>\n

        Chrome:<\/strong> Go to Settings \u2192 About Chrome. It will automatically check and update.<\/span>
        \n<\/span>Edge:<\/strong> Go to Settings \u2192 About Microsoft Edge. It will update there as well.<\/span>
        \n<\/span> Once it shows \u201cUp to date,\u201d you\u2019re good.<\/span><\/p>\n

        Do university-owned computers update automatically?<\/h3>\n

        Yes, most university-managed computers receive updates automatically. Users may still see a prompt to restart the browser \u2014 clicking “Relaunch” completes the update.<\/span><\/p>\n

        Do I need to restart my browser or my computer?<\/h3>\n

        Yes. The update doesn\u2019t fully apply until you relaunch the browser. A computer restart isn\u2019t required, but it doesn\u2019t hurt.<\/span><\/p>\n

        What version number should I look for to confirm I\u2019m safe?<\/h3>\n

        Look for the latest version your browser provides after updating. The \u201cAbout\u201d page will also tell you if you need to relaunch to finish installing the security patch.<\/span><\/p>\n

        What should I do if I think my browser was exploited?<\/h3>\n
          \n
        1. Update your browser immediately.<\/span>
          \n<\/span><\/li>\n
        2. Run a malware scan.<\/span>
          \n<\/span><\/li>\n
        3. Change your passwords if you notice unusual behavior.<\/span>
          \n<\/span><\/li>\n
        4. Reach out to the IT Service Desk if anything seems off \u2014 we can check your device.<\/span><\/li>\n<\/ol>\n

          Is it still safe to browse the web while waiting for the update?<\/h3>\n

          It\u2019s best to update before browsing. The process only takes a minute. Avoid clicking unknown links until your browser is fully patched.<\/span><\/p>\n

          Do I need to change my passwords after this vulnerability?<\/h3>\n

          Not unless you experienced strange behavior (unexpected logins, pop-ups, browser crashes). Staying updated is the key protective step.<\/span><\/p>\n

          Who do I contact if the update won\u2019t install?<\/h3>\n

          Contact the IT Service Desk<\/a>. They can remote in or guide you through a manual update.<\/span><\/p>\n

          Can IT push the update to my device?<\/h3>\n

          For university-managed machines, yes \u2014 IT can deploy or verify updates. Personally owned devices must be updated by the user.<\/span><\/p>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

          What is happening? A critical security flaw has been discovered in Google Chrome that is currently being used by hackers to attack devices. The Risk: Simply visiting a malicious website can allow attackers to get access to your accounts through the web browser. The Impact: This can lead to the theft of your passwords, access […]<\/p>\n","protected":false},"author":349,"featured_media":1184,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-1183","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/1183","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/users\/349"}],"replies":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/comments?post=1183"}],"version-history":[{"count":10,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/1183\/revisions"}],"predecessor-version":[{"id":1191,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/1183\/revisions\/1191"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/media\/1184"}],"wp:attachment":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/media?parent=1183"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/categories?post=1183"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/tags?post=1183"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}