Google pushes emergency patch for Chrome 0-day – check your browser version now

Google pushed an emergency patch for a high-severity Chrome flaw, already under active exploitation. So it's time to make sure you're running the most recent version of the web browser. The vuln, tracked as CVE-2025-10585, is a type confusion flaw in the V8 JavaScript and WebAssembly engine. This kind of vulnerability exists when the engine misinterprets a block of memory as one type of object when it's actually something else, and can lead to system crashes, arbitrary code execution, and when chained with other bugs, potentially a full system compromise via a malicious HTML page. "Google is aware that an exploit for CVE-2025-10585 exists in the wild," the Chocolate Factory warned. While you're patching… WatchGuard released an update to fix a critical remote code execution bug tracked as CVE-2025-9242 in its Firebox firewalls. It's due to an out-of-bounds write flaw and "affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer,"  the vendor warned in a Wednesday advisory. CVE-2025-9242 affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1. It's fixed in versions 12.3.1_Update3 (B722811), 12.5.13, 12.11.4, and 2025.1.1. Google Threat Analysis Group (TAG) discovered and reported the vulnerability, and, as usual with Google security holes, there's no additional information about who is abusing this vulnerability and what they are doing with the illicit acce...