Google released Chrome 155.0.8059.84 for Windows, Mac and Linux on Thursday, per Chrome Releases. It’s the second Chrome security update this week: Tuesday’s build fixed 37 security flaws, and Thursday’s fixes 10 more, including one rated critical (CVE-2026-110922) and six rated high. The worst case is a malicious web page. Google hasn’t reported any of these flaws being used in attacks, so this is routine but important. One catch: the update rolls out over days or weeks, and it doesn’t take effect until Chrome restarts.

At home: in Chrome, open Menu > Help > About Google Chrome, let it update, and click Relaunch. You want 155.0.8059.84 or later. Edge, Brave and Opera are built on the same engine but ship on their own schedules, so check their About pages over the next few days too. On a phone, update Chrome from your app store.

IT managers: push Chrome 155.0.8059.84 or later through your management tool and set a relaunch deadline so the update actually applies. Track Edge and other Chromium browsers separately.

Businesses running self-hosted Atlassian software: patch today. CISA added an Atlassian flaw (CVE-2026-21589) to its exploited list on Thursday and gave federal agencies until Sunday, Oct 18. It affects Data Center versions of Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo and Crowd, plus Crucible and Fisheye, and lets someone with no login read specific files on the server. The flaw isn’t new: Atlassian released fixes on Oct 5. What’s new is CISA saying it’s now being exploited; CISA doesn’t say by whom or how widely.

IT managers: upgrade to the fixed version for your product in Atlassian’s advisory table. If you can’t today, apply Atlassian’s temporary blocking rule and take the servers off the open internet. Search your access logs using Atlassian’s guidance, and if anything matches, rotate secrets stored on the server. Atlassian Cloud is already patched, and Bitbucket Cloud isn’t affected. BleepingComputer has more coverage.

Nothing to do at home for Atlassian: it’s workplace server software. Just restart Chrome.