A severe security vulnerability has been discovered in the IP (Internet Protocol) address management of Google’s Chrome and Apple’s Safari browsers. This flaw could allow cybercriminals to deploy spyware or surveillance apps on users’ phones, enabling them to monitor online or daily activities. It is believed that this vulnerability has existed in both browsers for the past 15 years, leading to numerous instances of spyware attacks.
The flaw, known as ‘0.0.0.0’, is related to the IP address and network management within the browsers. Cybercriminals could exploit this issue to bypass the security perimeter of the browser’s IP network and secretly install spyware on users’ devices. Many users might not even be aware that their online or offline activities are being monitored.
The discovery of this flaw has heightened concerns, as it is thought that millions of Chrome and Safari users worldwide may have been affected. In response, Apple will block the ‘0.0.0.0’ IP address in the next macOS update for Safari, and Google will release a security patch for Chrome to address the issue.