Advice:  Update Chrome now; Google says attackers are already using a flaw it fixed Monday

If you use Google Chrome, update it now.  Google released Chrome version 157.0.8103.50 on Monday, Nov. 9, with nine security fixes, and said it “is aware that an exploit” for one of them “exists in the wild,” meaning attackers are already using it, according to Google’s release notes.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the federal agency that tracks hacking threats, added the flaw to its list of actively exploited bugs on Nov. 10.  CISA says it could let a remote attacker run code through a specially crafted webpage, and that it could affect other browsers built on Google’s Chromium code, including Microsoft Edge and Opera.  Federal agencies must fix it by Nov. 24.

How to update

• Chrome on a computer:  Click the three-dot menu, then Help, then About Google Chrome.  Chrome checks for the update; click Relaunch when it appears, Google’s help page says.  Google says the update rolls out over days or weeks, so check by hand rather than wait.
• Chrome on Android:  Google says version 157.0.8103.50 for Android has the same security fixes and reaches the Google Play store over a few days.
• Edge or Opera:  CISA says Chromium-based browsers may be affected; check each browser’s own About or Help page for updates.

iPhones and iPads, too

Apple also released iOS 27.2.1 on Nov. 9 with nine security fixes, according to its security notes.  One fixes a flaw where “a remote attacker may be able to join an iMessage group chat and receive its messages.”  Another let a person added to a group see messages sent before they joined.  Several more let someone within Bluetooth range get around limits on pairing codes.  Apple does not say any of these flaws was used in attacks.  Phones staying on iOS 26 can get iOS 26.7.3 with most of the same fixes.  To update, go to Settings, then General, then Software Update, Apple says.

This story is advice based on company and federal security notices.  The paper has no tie to any product named.

Source:  Google Chrome Releases:  Stable Channel Update for Desktop, Nov. 9, 2026, CISA Known Exploited Vulnerabilities Catalog and Apple:  security content of iOS 27.2.1, checked Nov. 12, 2026.