Google says an Apple employee found a serious Chrome zero-day, but did not report it
Apple researcher found a Google Chrome security bug, but reprotedly kept it a secret
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
AnAppleemployee knew about a bug in the Chromebrowserbut did not report it to Google’s developers, reports have claimed.
Acommenton the Chromium bug report site instead credits another individual for notifyingGoogle, noting, “This issue was reported by sisu from CTF team HXP and discovered by a member of Apple Security Engineering and Architecture (SEAR) during HXP CTF 2022, which will be acknowledged in the security fix notes for the appropriate Stable channel release at the time they are updated.”
At the time, the bug was a zero-day, however aTechCrunchreport says that Google’s $10,000 bug bounty was awarded to the individual who reported the bug, not the Apple employee who discovered the bug.
Chrome bug left unreported by Apple employee
Usually, tech companies work together to notify each other of bugs in the interest of cybersecurity, despite going head-to-head in other aspects of business.
These are the best malware removal tools>Chrome’s third exploited zero-day this year has also been fixed>A host of malicious Google Chrome extensions with 75 million installs have been removed
Gallileo, an individual claiming to be the Apple employee in question on a Discord channel viewed byTechCrunch, said:
“It was reported on June 5th, through my company. Yes it was late, there are multiple reasons for that. I first had to find the person responsible, the report had to be signed off by people and then the person responsible was [out of office]. It’s commendable that chrome decided to fix it asap, but I think there wasn’t any real urgency.”
On the flip side, the individual responsible for breaking the news to Chromium developers said:
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
“TBH, I have not looked into the issue since I did not discover the bug. However, I’m not 100% sure it was reported to the chromium team, so I wanted to be safe… This report is to ensure it gets handled in case team COPY has not yet reported it.”
TechRadar Proasked both companies - Google and Apple - for more information about the miscommunication. Neither immediately responded to our request.
ViaTechCrunch
With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!
LG Electronics sets ambitious B2B revenue goal to offset declining consumer demand
New fanless cooling technology enhances energy efficiency for AI workloads by achieving a 90% reduction in cooling power consumption
After Arcane season 1 ended on a stunning cliff hanger, its creators say it was ‘always the plan’ for those characters to die in the season 2 premiere
