Organisations face Chrome threats as Google patches 37 flaws including seven critical bugs

Google has addressed 37 security flaws in its Chrome browser, including seven rated as critical, according to research published by Malwarebytes Labs. This update is part of a broader review of security events that occurred between 12 October and 18 October 2026. The findings highlight the ongoing need for organisations to manage software updates carefully to protect against potential exploitation of known vulnerabilities.

The Malwarebytes Labs report covers a wide range of digital threats beyond browser fixes. It includes warnings about AI worms spreading across smart devices, data leaks from companion robots, and scams targeting job seekers. These diverse threats illustrate the expanding attack surface for both individuals and enterprises, requiring a holistic approach to cybersecurity that extends beyond simple patching of operating systems or browsers.

What we know

The critical bugs in Chrome are the most severe issues identified in the update. The source material does not provide specific technical details for each flaw, but the high count of 37 total issues suggests a significant maintenance effort by Google. The inclusion of seven critical ratings indicates that some of these flaws pose a severe risk to users who have not yet applied the latest browser update.

Other notable events in the same timeframe include the FTC alleging a sextortion help firm took $60 million from victims. Additionally, Anthropic warned that AI worms could spread across smart devices, raising concerns about the security of interconnected home technology. These incidents show that threats are evolving rapidly, moving from traditional software exploits to more complex social engineering and AI-driven attacks.

Defender's checklist

• Ensure all employees have updated their Chrome browsers to the latest version immediately
• Verify that automated update policies are functioning correctly across all corporate devices
• Review firewall logs for any unusual outbound traffic that might indicate compromise
• Conduct a quick audit of smart device security settings within the organisation

The background in plain language

Software vulnerabilities are gaps in code that attackers can exploit to gain unauthorised access or control. Critical flaws are the most dangerous because they often require no user action to exploit. Regular updates patch these holes. Organisations must prioritise updating critical software quickly. Delaying updates leaves systems exposed to known threats. Teams usually monitor vendor advisories for urgent fixes. Check whether your devices are receiving updates automatically. This reduces the window of opportunity for attackers. Proactive maintenance is key to defence.

What to do and how to stay safe: Google

• Update your Chrome browser to the latest version immediately to protect against the seven critical flaws
• Check your device settings to ensure automatic updates are enabled for all major software
• Be cautious of unsolicited messages, especially those related to job applications or urgent requests
• Once the vendor provides an update for any other affected software, install it without delay

General security guidance from the TechWire Beat newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How many critical flaws were fixed in the Chrome update?

Google fixed seven critical bugs in the Chrome update, according to the Malwarebytes Labs report.

What other major security threats were reported in the same week?

The report also covered warnings about AI worms, data leaks from robots, and sextortion scams.

When were these security events observed?

The events reviewed by Malwarebytes Labs occurred between 12 October and 18 October 2026.