Close Chrome and open it again today. That's the fix, and it takes ten seconds.
What happened
On November 9, Google put out an emergency update for Chrome, the web browser most offices use. The update fixes nine security problems. One of them is already being used by criminals to attack people. Google says it knows an attack that uses this flaw exists, but it hasn't said who is being targeted or how.
The flaw was reported to Google on November 6. The fix came out three days later. That speed tells you how seriously Google is treating it.
What this means in plain English
You'll sometimes hear this kind of bug called a "zero-day". That just means criminals found it and used it before a fix existed. The flaw is in the part of Chrome that reads a common type of web content. A booby-trapped web page can confuse Chrome and use that confusion to run the attacker's own code on your computer.
You don't have to download anything or click "allow". In attacks like this, visiting the wrong page can be enough. It could be a fake site, a hacked real site, or a bad ad on a site you trust.
Why a small business should care
Think about what your staff do in a browser all day: email, online banking, payroll, accounting, supplier portals, cloud files. The browser is the front door to almost all of it. A browser flaw that's being used in real attacks is about as direct a path into a business as it gets.
Who's affected
Anyone using Chrome on Windows, Mac or Linux who hasn't updated yet.
The fixed version is 157.0.8103.50 or newer.
Other browsers built on the same engine, like Microsoft Edge, Brave, Opera and Vivaldi, are expected to get the same fix from their makers. Watch for those updates too.
What to do: everyone
In Chrome, click the three dots at the top right.
Go to Help, then About Google Chrome.
If you see a Relaunch button, click it. Chrome will reopen with your tabs.
Check that the version number is 157.0.8103.50 or higher.
Chrome downloads updates by itself, but it can't finish installing until you close and reopen it. Plenty of people leave the browser open for weeks with forty tabs, so the update just sits there waiting. Google also rolls updates out gradually over days or weeks, so don't assume yours has arrived. Check it.
What to do: if you run the business
Make "close your browser on Friday" a habit for everyone. This is the eighth time this year Google has rushed out a fix for a flaw already being used in attacks.
Don't forget the laptops that rarely come into the office, or the shared front-desk PC nobody logs off.
Ask whoever looks after your IT whether they can see which computers are still on an old browser version, or whether they're assuming auto-update handled it. Those are two different answers.
Questions to ask your IT provider
Do you check browser versions on our computers, or just Windows updates?
How quickly do emergency browser fixes reach our machines?
Is Edge being updated too, even if nobody uses it on purpose?
Sources
BleepingComputer: Google patches eighth Chrome zero-day exploited in attacks this year
The Hacker News: Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
Contact Nautalex to see how we can help you with keeping your staff's computers updated.
