Chrome Zero-Day Exploited: Update Now for V8 Vulnerability

Building more with GPT-5.1-Codex-Max

• GPT-5.1-Codex-Max improves long-horizon coding and cybersecurity tasks, becoming OpenAI's most capable cybersecurity model.
• Dedicated cybersecurity monitoring detects and disrupts malicious activity, despite not reaching "High capability."
• Codex runs in a secure sandbox by default; OpenAI advises developers to review its work as an additional reviewer.

Source: OpenAI | Date: November 19, 2025

GPT-5.1-Codex-Max System Card

• GPT-5.1-Codex-Max incorporates comprehensive safety measures at both model and product levels.
• Model-level mitigations include safety training to address harmful tasks and prompt injection attacks.
• Evaluated as highly capable in cybersecurity, future models will require continued vigilance and adaptive security.

Source: OpenAI | Date: November 19, 2025 /n

Google Patches Actively Exploited Chrome V8 Zero-Day (CVE-2025-13223)

• Google has released an urgent security update for Chrome to address a high-severity zero-day vulnerability, CVE-2025-13223, identified as a type confusion bug in the V8 JavaScript engine.
• This critical flaw has been actively exploited in the wild, prompting advisories from CISA and CSA Singapore urging users to update their browsers immediately to version 129.0.6478.118 or later.
• The fix is available for Chrome stable channel releases across Windows, macOS, and Linux, and affects versions prior to 129.0.6478.118.

Source: Google Chrome Releases | Date: November 19, 2025

Microsoft 365 Copilot Browser Extension for Chrome in Development

• Microsoft is developing a Microsoft 365 Copilot browser extension for Chrome, designed to provide chat and search capabilities directly within the browser experience.
• This extension aims to assist users in interacting with Copilot outside of the traditional Microsoft 365 application ecosystem, bringing AI assistance directly to web browsing activities.
• The feature is currently planned for release in February 2026, indicating Microsoft's continued integration of AI assistant functionalities into browser workflows.

Source: Microsoft 365 Roadmap | Date:20 November 2025

References

1. Chrome Releases Security Update for V8 Zero-Day, Patch Now - Google Chrome Releases
2. U.S. CISA adds a Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog - Security Affairs
3. Google Patches Actively Exploited Chrome Zero-Day (CVE-2025-13223) - The Hacker News
4. Active Exploitation of Zero-Day Vulnerability in Google Chrome - Cyber Security Agency of Singapore (CSA)
5. Microsoft 365 Copilot – Chat & Search Browser Extension for Chrome - Microsoft 365 Roadmap