BTC $69,330.00 -5.98%
ETH $1,960.89 -4.42%
BNB $638.27 -5.85%
XRP $1.01 -3.33%
SOL $79.27 -4.70%
TRX $0.3130 -1.26%
DOGE $0.0643 -4.41%
ADA $0.1693 -2.22%
BCH $219.05 -4.51%
LINK $9.81 -3.12%
HYPE $71.64 -0.68%
AAVE $112.04 -6.06%
SUI $0.7811 -4.40%
XLM $0.1436 -1.97%
ZEC $935.80 -4.94%
AAPL $356.99 +0.25%
AMZN $268.55 +0.82%
GOOGL $301.08 +2.00%
MSFT $522.54 +0.17%
META $625.66 -0.78%
NVDA $164.07 +1.76%
TSLA $398.77 +3.03%
SNDK $928.72 -3.21%
INTC $61.03 +0.18%
SPCX $140.84 +0.67%
MU $796.27 +0.62%
AMD $576.82 +1.88%
BTC $69,330.00 -5.98%
ETH $1,960.89 -4.42%
BNB $638.27 -5.85%
XRP $1.01 -3.33%
SOL $79.27 -4.70%
TRX $0.3130 -1.26%
DOGE $0.0643 -4.41%
ADA $0.1693 -2.22%
BCH $219.05 -4.51%
LINK $9.81 -3.12%
HYPE $71.64 -0.68%
AAVE $112.04 -6.06%
SUI $0.7811 -4.40%
XLM $0.1436 -1.97%
ZEC $935.80 -4.94%
AAPL $356.99 +0.25%
AMZN $268.55 +0.82%
GOOGL $301.08 +2.00%
MSFT $522.54 +0.17%
META $625.66 -0.78%
NVDA $164.07 +1.76%
TSLA $398.77 +3.03%
SNDK $928.72 -3.21%
INTC $61.03 +0.18%
SPCX $140.84 +0.67%
MU $796.27 +0.62%
AMD $576.82 +1.88%

rome

All
Article
Flash

Google urgently releases Chrome security update: fixes zero-day vulnerability already being exploited in the wild, urges users to upgrade immediately

On November 9, 2026, Google released an emergency stable channel update for the desktop Chrome browser, fixing nine security vulnerabilities, including a zero-day vulnerability that was already being exploited in the wild. This update raises the Chrome version on Windows and Mac platforms to 157.8103.5/.51, and to 157.8103.5 on the Linux platform, and will be gradually rolled out over the next few days to weeks. The core focus of this update is the high-risk vulnerability numbered CVE-2026-125350, which is a use-after-free issue in an XML component. Google explicitly stated in the announcement that "CVE-2026-125350 is known to be exploited in the wild," but did not disclose specific attack methods, the scale of victims, or attribution of the attack activities.The vulnerability was reported by an anonymous researcher on November 6, 2026, just three days before Google released the fix. Among the nine fixes, seven are classified as "high risk" and two as "medium risk." In addition to CVE-2026-125350, another high-risk vulnerability, CVE-2026-125346, also pertains to a use-after-free issue in an XML component, reported by Arni Hardarson of Neonix Security on October 12, 2026, but Google only marked CVE-2026-125350 as an actively exploited vulnerability. The other high-risk vulnerabilities include uninitialized resources in WebGL, improper FileSystem authorization, synthesizer buffer overflow, GPU out-of-bounds write, and V8 type confusion, most of which were discovered by Google's internal security team.Google also confirmed that the Android version of Chrome (157.8103.5) released on the same day includes the same security fixes as the desktop version, with no exceptions noted. Users on the Extended Stable channel should install the update released separately on November 9, with Windows and Mac versions being 156.8078.96, which also lists CVE-2026-125350 as a high-risk fix. The Hong Kong Government Computer Security Incident Coordination Centre (GovCERT.HK) issued a security alert on the same day, defining affected systems as versions prior to Chrome 157.8103.5, and pointed out that successful exploitation of the related vulnerabilities could lead to remote code execution, denial of service, tampering, or bypassing security restrictions. The Hong Kong Computer Security Incident Coordination Centre (HKCERT) rated the risk level of this update as "extremely high risk." Google explained in the announcement that access to vulnerability details and links may remain restricted until most users complete the update. The company recommends that users manually check and trigger the update via "Settings → About Chrome," and restart the browser after completing the update for the patch to take effect. For users still running versions prior to Chrome 157.8103.5, the current priority action is to confirm the version number and restart immediately to complete the upgrade.

first_img Chrome enhances autofill access to Gmail, Gemini extracts order information

On Wednesday, Google announced that the Chrome browser has launched the "Enhanced Autofill" feature, which can call Personal Intelligence through Gemini to retrieve order numbers, logistics tracking information, and flight booking information from users' Gmail, providing autofill suggestions when needed in web forms. This feature is available to U.S. users who have enabled Personal Intelligence, covering desktop, Android, and iOS; Google has not announced the launch time for other countries and regions.In the announcement, Google only listed the three types of data from Gmail mentioned above. Credit card numbers and addresses still fall under Chrome's standard autofill, sourced from information already saved by users in the browser; the announcement did not specify whether the new feature would extract this content from the inbox. Chrome Product Manager Amanda Lim stated that users can manage whether to enable Enhanced Autofill and the data it can access in Chrome settings, with sensitive data being encrypted, allowing users to maintain control.Regarding privacy, Google previously stated that Gemini and AI Mode will not directly use users' Gmail inbox or Google Photos library for training. Users can choose whether to connect the application and can turn it off at any time, but Google will use limited information such as specific prompts and model responses for training. Google also revised its privacy policy on October 16, adding an exception clause: if users choose to provide Gmail, Drive, and Photos content to other Google services that support personalized advertising, the relevant data may be used for personalized ads; Google claims this data is not used for ad targeting by default, and advertisers cannot access this content. Chrome holds about 65% of the browser market share.

first_img Aerodrome and Velodrome merged to launch the Aero spot exchange across the Seven Network

Decentralized exchange Aerodrome Finance (AERO) and Velodrome announced their official merger, launching the on-chain spot exchange Aero, deployed on seven networks: Ethereum mainnet, Base, Robinhood Chain, Ink, OP Mainnet, Arc, and Arbitrum, aiming to integrate the existing businesses of the two DEXs into a unified platform. The exchange is developed by Dromos Labs.According to a statement released on Wednesday, Aerodrome accounted for 58% of DEX trading volume on Base in the third quarter, while Velodrome accounted for 60% on OP Mainnet, with Aerodrome leading all DEXs in Bitcoin-USD trading volume during the same period. The new exchange extends this model to seven networks, which collectively handle approximately $120 billion in DEX trading each month. Alex Cutler, founder and CEO of Dromos Labs, stated that Aerodrome and Velodrome prevailed because the model is more beneficial to users, bringing Aero to the largest market on-chain, with 100% of the revenue generated returned to users staking AERO.As part of the merger, existing AERO and VELO tokens will migrate to the new AERO token, with veAERO and veVELO converting to sAERO. Aero introduces a new economic system, with the core feature Predictive Allocation allowing participants to stake AERO and direct liquidity reward budgets to markets expected to generate returns. Additionally, Aero launches Metaswaps, connecting cross-network transactions using existing on-chain liquidity; the Slipstream V3 upgrade introduces a dynamic fee mechanism that increases fees during rapid market fluctuations and captures MEV on supported Layer 2 networks.

first_img EVM and Solana interoperability protocol Rome launched its native token ROME

Rome Protocol announced the launch of its native token ROME, which will be used as Gas for the Rome proprietary chain, and can be used for transactions on the chain from the first day of its launch. The protocol connects EVM applications with Solana, allowing Solidity contracts and users to interact with Solana programs and assets, and settle atomically on Solana; the protocol is already running on the mainnet, with more components in the development and testing networks.Rome EVM runs as a single program on the Solana mainnet, supporting multiple EVM chains and various Gas tokens, with EVM contracts sharing state with Solana programs. The mainnet program has been audited by Halborn, and the deployed binaries can be reproduced from public repositories. Solana zkEVM operates on the development network, using Solana for settlement, data availability, and verification; Canton zkEVM operates on the testing network. The mainnet has provided asset bridges such as USDC, oracle gateways, block explorers, and applications, allowing users to sign on the original EVM chain, self-custody their assets, and access the Solana lending market.Rome charges a small fee for each transaction on every chain it supports, half of which is retained in ROME, or purchased on the open market and added to a non-sale reserve. The project states that this is not a token sale, and it will not disclose valuation, dates, or market listings; supply and schedule will be announced after determining the trading venue.

first_img Aero announced the merger terms of Aerodrome and Velodrome, starting on October 21

Aero announced the token exchange terms and schedule for the merger of Aerodrome and Velodrome. The merger will start on October 21 at 20:00 (Eastern Time), at which point the token emissions of the two old platforms will cease. Existing AERO will be exchanged at a 1:1 ratio for the new AERO, with each VELO exchanging for approximately 0.044 AERO. This ratio applies to both circulating tokens and locked tokens. The exchange rate for VELO depends on the supply at the time of launch, with Aerodrome holders receiving 94.5% of the new supply and Velodrome holders receiving 5.5%.According to DefiLlama data, as of October 9, the total locked amount for the two exchanges is approximately $422 million. The merger was announced in November 2025, and the developers, Dromos Labs, originally planned to complete it in the second quarter of 2026. The new model replaces the original weekly voting cycle with real-time allocation, allowing staked AERO (sAERO) holders to direct rewards to the liquidity pool and accumulate earnings along with exchange revenue. There is an initial 47-hour cooling period for allocation adjustments.Existing veAERO and veVELO positions will be converted to new sAERO positions, with the remaining lock-up time carried over and rounded up to the nearest whole week, and permanent locks will convert to the longest staking period. Tokens will not be automatically exchanged; self-custodied assets must be managed through the upgrade portal at aerodrome.finance or velodrome.finance, and rewards and rebases must be claimed and active votes cleared first.

Monochrome Exchange launched the MCR IEO, raising over 5.5 million USDT

According to monitoring by Lookonchain, Monochrome Exchange, an Australian digital asset management company founded by Jeff Yew, former co-founder and CEO of Binance Australia, has launched the MCR token IEO, raising over 5.5 million USDT to date.The total supply of MCR is 210 million tokens, of which 5%, or 10.5 million tokens, are allocated for this public IEO. The IEO tokens will be locked for 1 month after the TGE, followed by a 3-month linear release. MCR holders can enjoy discounts on spot and derivatives trading fees, priority subscription rights for Digital IPOs and token issuances, and can earn rewards through staking, enhance Launchpad quota weight, and participate in node programs, while also engaging in platform governance through Monochrome DAO.20% of the platform's net profit will be used for open market repurchases of MCR and destruction each quarter, while 25% of the Digital IPO fee income will be included in the quarterly repurchase and destruction fund, aiming to continuously reduce the circulating supply of MCR through platform business growth.On September 13, 2021, Monochrome announced the completion of a $1.8 million Series A financing round, co-led by Litecoin founder Charlie Lee, Blockstream Chief Strategy Officer Samson Mow, former Binance Chief Financial Officer Wei Zhou, and founders of Blueshyft and DeFi protocol Synthetix, Kain Warwick, with a post-investment valuation of approximately $15 million.On August 18, 2022, Monochrome Asset Management obtained the country's first financial services license (AFSL), which will be used to issue cryptocurrency-related exchange-traded funds (ETFs).

Bitget CFD Chief Analyst: PCE data will become a barometer for Federal Reserve policy, beware of the downward risk for gold

Today, Bitget CFD Chief Analyst Lewis Huang pointed out in an online live broadcast themed "Logic of Gold Trend Analysis" that this week's market focus will be on the U.S. May PCE Price Index and the final value of Q1 GDP.Previously, CPI and PPI data reached new highs, non-farm employment showed robust performance, and signals of inflation rebound combined with the Federal Reserve's hawkish stance have led the market to gradually digest rate hike expectations. He emphasized that Waller has clearly stated that controlling inflation is the top priority, and the interest rate dot plot shows that rate hikes in 2026 are becoming an internal consensus, and the market needs to prepare for a higher and longer-lasting interest rate environment.Regarding the gold trend, Lewis Huang stated that due to the impact of geopolitical conflicts driving up energy prices, the overall year-on-year increase in the Personal Consumption Expenditures (PCE) Price Index may rise to 3.4% or even higher. If the Personal Consumption Expenditures (PCE) Price Index rises unexpectedly, the U.S. Dollar Index will gain strong momentum, while non-interest-bearing assets like gold will face weakening risks. He suggests that CFD traders closely monitor inflation expectation differentials and flexibly capture opportunities for U.S. dollar bullishness or guard against gold downturns.
app_icon
ChainCatcher Building the Web3 world with innovations.