Digest · Tuesday

Security digest: March 25, 2025

1 editorial brief.

All digests · RSS · Markdown

Take stock

Most can relax: Operation ForumTroll. Admins of Windows fleets where Chrome updates are pinned, deferred or broken, and anyone still running Chrome 134.0.6998.176 or older on Windows.
None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Most can relax

Mar 25, 2025 · Vulnerability · CVE-2025-2783

Chrome CVE-2025-2783: Mojo Sandbox Escape Zero-Day

A real zero-day used for espionage in early 2025, long since fixed by Chrome's automatic updates; the lasting lesson is to make sure auto-update actually works on your fleet.

Must act: Admins of Windows fleets where Chrome updates are pinned, deferred or broken, and anyone still running Chrome 134.0.6998.176 or older on Windows.

Can relax: Users whose Chrome auto-updates and has been restarted since March 2025, plus all macOS, Linux, Android and iOS users of Chrome for this specific bug.

Confirm Chrome is current: open chrome://settings/help and relaunch if an update is pending.
In managed fleets, report on Chrome versions and flag any endpoint far behind the current Stable release.
Remove policies that pin or indefinitely defer Chrome updates, or set a short maximum deferral.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 0

GitHub-reviewed advisories rated critical, published this day (Pacific time).

None.