Security Alert: Update Chrome and Safari Now to Stop Hackers
Jeriel Isaiah Layantara
CEO & Founder of Round Bytes
Hello readers! We're here to warn you about a serious security alert that impacts millions of users all over the world. A serious security flaw has been discovered in web browsers used by the masses, including Google Chrome and Safari. This vulnerability could allow criminals to secretly siphon your personal data from your devices (iPhone, iPad, and Mac). This security flaw does impact both Google and Apple, and companies have acted swiftly, and now it is up to the consumer to update their devices immediately to keep themselves safe.
The security flaw, officially identified as CVE-2025-6558, exists in the rendering engine of all major browsers, including Google Chrome and Safari. Criminal hackers are exploiting this flaw to inject malicious code into websites. If a user attaches to one of the compromised sites, the malicious code runs automatically on the user's device without their knowledge.
The malicious code installs a specifically designed malware known as spyware. This type of spyware enables hackers to monitor the online habits of victims and retrieve their personal data. The relevant personal data can include browsing sessions, passwords, and other critical information. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has determined the flaw to be in a list of Known Exploited Vulnerabilities, confirming it as a current active threat from criminal exploitation.
When the flaw first appeared, it was used primarily against targeted victims that included journalists, activists, and politicians. A security analyst on the technology site Bleeping Computer warned that these sorts of flaws do not typically remain in the realm of any specific reputable target. Rather, when the flaw is disclosed, its techniques are quickly spread throughout criminal networks and often used in broad phishing attacks against the general public.
Action from Google and Apple
In response to this alarming threat, both Google and Apple have provided their users with security patches to fix the loophole.
- Google: Google has patched the hole in the Chrome browser via a security update. Users on desktop and Android versions should confirm their browser version is updated to at least version 138.0.7204.157. Chrome automatically updates, but we do recommend you verify your current version.
- Apple: Apple has fixed the issue, but with a difference between the Chrome browser and Apple's Safari browser. The vulnerability was tied to its WebKit rendering engine, which is part of the operating system, not just the browser. In order to be secured, all Apple users will need to do a complete OS update, not just a simple browser update.
Update Your Device Now!
This is an urgent situation for everyone that owns an Apple device. It is not a good idea to just wait for the device to update automatically because hackers are already actively exploiting this vulnerability, and you need to manually address the situation or protect your data.
Here are some basic steps to follow in order to update your devices:
- For all iPhone and iPad devices - immediately install iOS 18.6
- For all Mac devices - update your operating system to macOS 15.6.1, or any later version
- For all Apple Watch devices - update them to watchOS 11.6
- For all Apple TV devices - update them to tvOS 18.6
You can do all of these updates by going to the Settings > General > Software Update mode on your respective device.
This situation is a powerful reminder of the importance of digital security. Even though we have an industry of good people at great companies, like Apple and Google, to keep us safe, we also have an obligation to do as much as we can. The importance of regularly updating your software is an easy technology action that is very powerful against sophisticated cyber attacks and ensuring that your personal data remains safe.
