BTC $69,272.25 -6.02%
ETH $1,959.06 -4.46%
BNB $637.57 -6.01%
XRP $1.01 -3.27%
SOL $79.11 -4.71%
TRX $0.3142 -0.88%
DOGE $0.0641 -4.51%
ADA $0.1685 -2.66%
BCH $218.62 -4.66%
LINK $9.76 -3.39%
HYPE $71.55 -0.61%
AAVE $111.34 -6.36%
SUI $0.7804 -4.60%
XLM $0.1429 -2.38%
ZEC $929.53 -5.64%
AAPL $356.98 +0.28%
AMZN $268.20 +0.69%
GOOGL $301.10 +2.04%
MSFT $522.53 +0.16%
META $625.64 -0.79%
NVDA $164.00 +1.81%
TSLA $398.96 +3.04%
SNDK $931.42 -2.96%
INTC $61.14 +0.33%
SPCX $140.72 +0.69%
MU $798.57 +0.80%
AMD $578.34 +2.05%
BTC $69,272.25 -6.02%
ETH $1,959.06 -4.46%
BNB $637.57 -6.01%
XRP $1.01 -3.27%
SOL $79.11 -4.71%
TRX $0.3142 -0.88%
DOGE $0.0641 -4.51%
ADA $0.1685 -2.66%
BCH $218.62 -4.66%
LINK $9.76 -3.39%
HYPE $71.55 -0.61%
AAVE $111.34 -6.36%
SUI $0.7804 -4.60%
XLM $0.1429 -2.38%
ZEC $929.53 -5.64%
AAPL $356.98 +0.28%
AMZN $268.20 +0.69%
GOOGL $301.10 +2.04%
MSFT $522.53 +0.16%
META $625.64 -0.79%
NVDA $164.00 +1.81%
TSLA $398.96 +3.04%
SNDK $931.42 -2.96%
INTC $61.14 +0.33%
SPCX $140.72 +0.69%
MU $798.57 +0.80%
AMD $578.34 +2.05%

chr

All
Article
Flash

Google urgently releases Chrome security update: fixes zero-day vulnerability already being exploited in the wild, urges users to upgrade immediately

On November 9, 2026, Google released an emergency stable channel update for the desktop Chrome browser, fixing nine security vulnerabilities, including a zero-day vulnerability that was already being exploited in the wild. This update raises the Chrome version on Windows and Mac platforms to 157.8103.5/.51, and to 157.8103.5 on the Linux platform, and will be gradually rolled out over the next few days to weeks. The core focus of this update is the high-risk vulnerability numbered CVE-2026-125350, which is a use-after-free issue in an XML component. Google explicitly stated in the announcement that "CVE-2026-125350 is known to be exploited in the wild," but did not disclose specific attack methods, the scale of victims, or attribution of the attack activities.The vulnerability was reported by an anonymous researcher on November 6, 2026, just three days before Google released the fix. Among the nine fixes, seven are classified as "high risk" and two as "medium risk." In addition to CVE-2026-125350, another high-risk vulnerability, CVE-2026-125346, also pertains to a use-after-free issue in an XML component, reported by Arni Hardarson of Neonix Security on October 12, 2026, but Google only marked CVE-2026-125350 as an actively exploited vulnerability. The other high-risk vulnerabilities include uninitialized resources in WebGL, improper FileSystem authorization, synthesizer buffer overflow, GPU out-of-bounds write, and V8 type confusion, most of which were discovered by Google's internal security team.Google also confirmed that the Android version of Chrome (157.8103.5) released on the same day includes the same security fixes as the desktop version, with no exceptions noted. Users on the Extended Stable channel should install the update released separately on November 9, with Windows and Mac versions being 156.8078.96, which also lists CVE-2026-125350 as a high-risk fix. The Hong Kong Government Computer Security Incident Coordination Centre (GovCERT.HK) issued a security alert on the same day, defining affected systems as versions prior to Chrome 157.8103.5, and pointed out that successful exploitation of the related vulnerabilities could lead to remote code execution, denial of service, tampering, or bypassing security restrictions. The Hong Kong Computer Security Incident Coordination Centre (HKCERT) rated the risk level of this update as "extremely high risk." Google explained in the announcement that access to vulnerability details and links may remain restricted until most users complete the update. The company recommends that users manually check and trigger the update via "Settings → About Chrome," and restart the browser after completing the update for the patch to take effect. For users still running versions prior to Chrome 157.8103.5, the current priority action is to confirm the version number and restart immediately to complete the upgrade.

first_img Chrome enhances autofill access to Gmail, Gemini extracts order information

On Wednesday, Google announced that the Chrome browser has launched the "Enhanced Autofill" feature, which can call Personal Intelligence through Gemini to retrieve order numbers, logistics tracking information, and flight booking information from users' Gmail, providing autofill suggestions when needed in web forms. This feature is available to U.S. users who have enabled Personal Intelligence, covering desktop, Android, and iOS; Google has not announced the launch time for other countries and regions.In the announcement, Google only listed the three types of data from Gmail mentioned above. Credit card numbers and addresses still fall under Chrome's standard autofill, sourced from information already saved by users in the browser; the announcement did not specify whether the new feature would extract this content from the inbox. Chrome Product Manager Amanda Lim stated that users can manage whether to enable Enhanced Autofill and the data it can access in Chrome settings, with sensitive data being encrypted, allowing users to maintain control.Regarding privacy, Google previously stated that Gemini and AI Mode will not directly use users' Gmail inbox or Google Photos library for training. Users can choose whether to connect the application and can turn it off at any time, but Google will use limited information such as specific prompts and model responses for training. Google also revised its privacy policy on October 16, adding an exception clause: if users choose to provide Gmail, Drive, and Photos content to other Google services that support personalized advertising, the relevant data may be used for personalized ads; Google claims this data is not used for ad targeting by default, and advertisers cannot access this content. Chrome holds about 65% of the browser market share.

Aster updates the token unlocking plan, and RootData adjusts the data synchronously after official confirmation

Recently, the Aster team provided feedback to RootData regarding some adjustments needed in the previously released token unlock data. After receiving the feedback, RootData verified the information against Aster's official documentation and several similar token unlock data platforms, finding no significant discrepancies between the previously recorded information and the publicly available documents at that time.Subsequently, RootData communicated further with the Aster official team and updated the on-site Aster token unlock data based on the latest confirmed information from the project team. Currently, some third-party token unlock data platforms have not yet synchronized this official document adjustment, making RootData one of the earlier platforms to complete the relevant data updates.This adjustment mainly involves two categories: Airdrop and Ecosystem & Community, with the specific changes as follows:1. Airdrop Category Adjustment: Split into "Founder's Airdrop" and "Governance Airdrop"Based on the latest confirmed information from Aster, RootData has re-split the original airdrop category into "Founder's Airdrop" and "Governance Airdrop."The previous official document indicated that after the Aster TGE, eligible participants would immediately receive 8.8% of the total allocation, with the remaining tokens in this category gradually released over the next 80 months, with specific release times potentially adjusted based on protocol governance.The latest official document adjustment states that the remaining ASTER tokens in this category will be reserved for airdrops, but the protocol governance body may adjust the relevant arrangements in the future.Therefore, RootData will no longer track the unlock data for the governance airdrop portion according to a fixed release cycle, and will instead dynamically update based on Aster's official announcements and governance decisions.2. Ecosystem & Community Category Adjustment: Split into Ecosystem & Community 1 and Ecosystem & Community 2Previously, the Aster Ecosystem & Community category (excluding the APX to ASTER conversion part) adopted a linear release model, planning to gradually unlock over 20 months. This model has been executed for 4 months (from October 2025 to January 2026), after which it will be adjusted to a reward distribution model based on staking mechanisms.According to Aster's current staking mechanism, the longer the user locks their tokens, the higher the loyalty reward APY they can receive. Since this allocation mechanism has shifted from a fixed linear release to a staking incentive model, RootData will no longer track the fixed unlock cycle for Ecosystem & Community 2 as originally planned, and will adjust based on the latest official announcements.It is reported that Aster completed its token TGE on September 17, 2025. Since its launch, Aster has made multiple adjustments to its token economic model, including extending the team token lock-up period by 12 months, adjusting the release method for ecosystem and community tokens, and redefining the governance arrangements for the remaining airdrop tokens.RootData stated that adjustments to the token economic model as the project develops and governance needs arise are common in the industry; the key is whether the project team can disclose relevant changes in a timely and transparent manner. RootData also encourages project teams to proactively submit token unlock plans and change information to help the community and users better understand token supply and release situations.

Monochrome Exchange launched the MCR IEO, raising over 5.5 million USDT

According to monitoring by Lookonchain, Monochrome Exchange, an Australian digital asset management company founded by Jeff Yew, former co-founder and CEO of Binance Australia, has launched the MCR token IEO, raising over 5.5 million USDT to date.The total supply of MCR is 210 million tokens, of which 5%, or 10.5 million tokens, are allocated for this public IEO. The IEO tokens will be locked for 1 month after the TGE, followed by a 3-month linear release. MCR holders can enjoy discounts on spot and derivatives trading fees, priority subscription rights for Digital IPOs and token issuances, and can earn rewards through staking, enhance Launchpad quota weight, and participate in node programs, while also engaging in platform governance through Monochrome DAO.20% of the platform's net profit will be used for open market repurchases of MCR and destruction each quarter, while 25% of the Digital IPO fee income will be included in the quarterly repurchase and destruction fund, aiming to continuously reduce the circulating supply of MCR through platform business growth.On September 13, 2021, Monochrome announced the completion of a $1.8 million Series A financing round, co-led by Litecoin founder Charlie Lee, Blockstream Chief Strategy Officer Samson Mow, former Binance Chief Financial Officer Wei Zhou, and founders of Blueshyft and DeFi protocol Synthetix, Kain Warwick, with a post-investment valuation of approximately $15 million.On August 18, 2022, Monochrome Asset Management obtained the country's first financial services license (AFSL), which will be used to issue cryptocurrency-related exchange-traded funds (ETFs).
app_icon
ChainCatcher Building the Web3 world with innovations.