BTC $71,364.17 -4.31%
ETH $2,012.73 -3.11%
BNB $653.89 -4.69%
XRP $1.03 -2.85%
SOL $81.16 -4.43%
TRX $0.3154 -0.67%
DOGE $0.0657 -4.12%
ADA $0.1724 -2.87%
BCH $225.47 -2.58%
LINK $10.02 -3.59%
HYPE $71.73 -1.86%
AAVE $114.17 -7.27%
SUI $0.8011 -4.42%
XLM $0.1484 -1.03%
ZEC $949.95 -4.98%
AAPL $355.09 -0.09%
AMZN $267.62 +0.53%
GOOGL $299.24 +1.95%
MSFT $523.23 +0.55%
META $624.60 -0.95%
NVDA $166.39 -4.47%
TSLA $398.01 +1.79%
SNDK $942.00 -4.26%
INTC $61.46 -1.70%
SPCX $140.24 +0.09%
MU $805.43 -1.02%
AMD $586.13 +5.81%
BTC $71,364.17 -4.31%
ETH $2,012.73 -3.11%
BNB $653.89 -4.69%
XRP $1.03 -2.85%
SOL $81.16 -4.43%
TRX $0.3154 -0.67%
DOGE $0.0657 -4.12%
ADA $0.1724 -2.87%
BCH $225.47 -2.58%
LINK $10.02 -3.59%
HYPE $71.73 -1.86%
AAVE $114.17 -7.27%
SUI $0.8011 -4.42%
XLM $0.1484 -1.03%
ZEC $949.95 -4.98%
AAPL $355.09 -0.09%
AMZN $267.62 +0.53%
GOOGL $299.24 +1.95%
MSFT $523.23 +0.55%
META $624.60 -0.95%
NVDA $166.39 -4.47%
TSLA $398.01 +1.79%
SNDK $942.00 -4.26%
INTC $61.46 -1.70%
SPCX $140.24 +0.09%
MU $805.43 -1.02%
AMD $586.13 +5.81%

upgrade

All
Article
Flash

Google urgently releases Chrome security update: fixes zero-day vulnerability already being exploited in the wild, urges users to upgrade immediately

On November 9, 2026, Google released an emergency stable channel update for the desktop Chrome browser, fixing nine security vulnerabilities, including a zero-day vulnerability that was already being exploited in the wild. This update raises the Chrome version on Windows and Mac platforms to 157.8103.5/.51, and to 157.8103.5 on the Linux platform, and will be gradually rolled out over the next few days to weeks. The core focus of this update is the high-risk vulnerability numbered CVE-2026-125350, which is a use-after-free issue in an XML component. Google explicitly stated in the announcement that "CVE-2026-125350 is known to be exploited in the wild," but did not disclose specific attack methods, the scale of victims, or attribution of the attack activities.The vulnerability was reported by an anonymous researcher on November 6, 2026, just three days before Google released the fix. Among the nine fixes, seven are classified as "high risk" and two as "medium risk." In addition to CVE-2026-125350, another high-risk vulnerability, CVE-2026-125346, also pertains to a use-after-free issue in an XML component, reported by Arni Hardarson of Neonix Security on October 12, 2026, but Google only marked CVE-2026-125350 as an actively exploited vulnerability. The other high-risk vulnerabilities include uninitialized resources in WebGL, improper FileSystem authorization, synthesizer buffer overflow, GPU out-of-bounds write, and V8 type confusion, most of which were discovered by Google's internal security team.Google also confirmed that the Android version of Chrome (157.8103.5) released on the same day includes the same security fixes as the desktop version, with no exceptions noted. Users on the Extended Stable channel should install the update released separately on November 9, with Windows and Mac versions being 156.8078.96, which also lists CVE-2026-125350 as a high-risk fix. The Hong Kong Government Computer Security Incident Coordination Centre (GovCERT.HK) issued a security alert on the same day, defining affected systems as versions prior to Chrome 157.8103.5, and pointed out that successful exploitation of the related vulnerabilities could lead to remote code execution, denial of service, tampering, or bypassing security restrictions. The Hong Kong Computer Security Incident Coordination Centre (HKCERT) rated the risk level of this update as "extremely high risk." Google explained in the announcement that access to vulnerability details and links may remain restricted until most users complete the update. The company recommends that users manually check and trigger the update via "Settings → About Chrome," and restart the browser after completing the update for the patch to take effect. For users still running versions prior to Chrome 157.8103.5, the current priority action is to confirm the version number and restart immediately to complete the upgrade.

The Zcash community proposed the NU8 upgrade plan: it plans to introduce the Tachyon privacy pool by the end of January next year and increase the block size limit to 8MB

Zcash community member ValarDragon posted on the official community forum, proposing a series of plans to be included in the NU8 network upgrade, and suggested setting the upgrade target for the end of January 2027. The main content includes the launch of the Tachyon shielded pool, expanding transaction formats, increasing the maximum block size from 2MB to 8MB, and adding support for post-quantum cryptography transparent transaction opcodes.Other proposals also include: adjusting the NSM redistribution date to be closer to the time of Zcash's seventh halving; determining a date at the protocol level for Sapling to stop accepting new deposits while continuing to support transactions and withdrawals; and eliminating the need to update the Consensus Branch ID with each network upgrade to reduce wallet compatibility issues. ValarDragon stated that with the combination of Tachyon and larger block capacity, a shielded transaction processing capability of approximately 200 TPS is expected. In addition, the post-quantum transparent transaction feature will introduce schemes based on SPHINCS with 128-bit and 192-bit security levels. The above content currently belongs to the upgrade ideas proposed by community members, and specific implementation still depends on development progress and subsequent NU8 discussions and voting.

Goldman Sachs: Upgrades the forecast for U.S. data center construction spending, expected to reach 125 billion dollars by 2028

Despite the panic in the market caused by stricter regulations on data centers after the Democratic Party gained control of Congress, Goldman Sachs has raised its forecast for U.S. data center construction spending, increasing the 2026 expectation from $67 billion to $80 billion, and from $87 billion in 2027 to $100 billion, while also predicting for the first time that it will reach $125 billion in 2028.Goldman Sachs pointed out that there are currently about 86 GW of data center projects under construction in the U.S., with approximately $900 billion in high-confidence projects awaiting construction, indicating that the overall construction cycle remains resilient. The demand and backlog orders from hyperscale cloud service providers such as Microsoft, Amazon, and Google have not shown significant cooling, with H100 computing power rental prices rising 26% year-on-year and GB200 rental prices increasing by 50% since the beginning of the year.In response to the data center moratorium proposed by Texas Governor-elect Gina Hinojosa, Goldman Sachs believes that its impact is more about delaying project delivery rather than directly canceling construction plans, but it may lead to increased financing costs, reduced tax incentives, and some clients canceling contracts. Goldman Sachs also warned that the overall growth prospects of the industry need to be distinguished from the survival capabilities of individual developers, as highly leveraged data center developers may face severe financial pressure due to project delays and rising financing costs, with some companies potentially unable to last until their projects go into production.
app_icon
ChainCatcher Building the Web3 world with innovations.