Alphabet lost $500 billion in a day, Amazon slid after hours and Seoul’s Kospi fell 4 per cent as the AI build outgrew the cash that funds it. Lenders still queue for Microsoft, while shareholders punish the cash burners. Washington beat Moscow with public money. Against Beijing, it is borrowing.
Britain’s AI-security package ties agentic cyber defence, vulnerability discovery, AI model testing and biosecurity. Institutional shift matters: funding supports testing, assurance and deployment pathways, while the NCSC says human judgement and oversight must remain central as AI gains autonomy.
The FCC’s Intel waiver shows that semiconductor sovereignty depends not only on chips, but also on the factory robots that move materials. The one-year exception protects continuity without creating a blanket exemption, keeping national-security controls and manufacturing resilience aligned today.
16th March 2026 Cyber Update: Google Patches Actively Exploited Chrome Zero-Day
Google has issued an emergency patch for a high-severity zero-day (CVE-2026-3910) in its V8 JavaScript engine, which is being actively exploited in the wild. The flaw allows arbitrary code execution, posing a significant risk to billions of Chrome users globally, including in Australia.
Cyber News Centre's cyber update for 16th March 2026: Google has released an emergency security update for its Chrome browser to patch a high-severity zero-day vulnerability in its V8 JavaScript engine that is being actively exploited in the wild.
The Update and Why It Matters
Update: Google has released an emergency security update for its Chrome web browser, version 146.0.7680.75, to address a high-severity zero-day vulnerability, tracked as CVE-2026-3910. The flaw, an inappropriate implementation in Chrome's V8 JavaScript and WebAssembly engine, was discovered by Google's Threat Analysis Group on March 10, 2026, and is confirmed to be under active exploitation. The vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox simply by tricking a user into visiting a malicious website.
Given Chrome's dominant market share in Australia, a significant number of users and organizations are at immediate risk. The US Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, mandating federal agencies to apply the patch by March 27, 2026.
While another zero-day, CVE-2026-3909 in the Skia graphics library, was initially reported alongside this patch, Google has since clarified that its fix will be released in a future update. Users of all Chromium-based browsers, including Microsoft Edge, Brave, and Vivaldi, are also advised to update their software as soon as patches become available.
Why it Matters: The active exploitation of CVE-2026-3910 represents a direct and immediate threat to Australian individuals and organizations. With a low attack complexity that only requires visiting a compromised webpage, the potential for widespread impact is substantial. For businesses, this could lead to the deployment of malware, ransomware, or spyware, resulting in significant data breaches, financial loss, and reputational damage.
The vulnerability undermines the security of the browser, a primary tool for daily business operations, and highlights the persistent threat of sophisticated actors targeting widely used software. The inclusion in the CISA KEV catalog underscores the seriousness of the threat and the urgency for all organizations, not just government agencies, to prioritize patching to mitigate their exposure.
Given Chrome's dominant market share in Australia, a significant number of users and organizations are at immediate risk. The US Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, mandating federal agencies to apply the patch by March 27, 2026.
How to stay safe
To keep your device secure, update Chrome as soon as you can. Here are a few handy tips to help you stay out of trouble, even before a zero-day is patched:
Don't click on unknown links in emails, messages, unknown websites, or social media.
Turn on automatic updates and restart your computer regularly. Lots of people leave browsers open for days, which means you aren't protected straight away even if the update downloads in the background.
Use an up-to-date anti-malware program that includes web protection.
If you use other browsers based on Chromium, you should see a similar update coming soon.
Get the stories that matter to you. Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
Sign up for Cyber News Centre
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead.
Alphabet lost $500 billion in a day, Amazon slid after hours and Seoul’s Kospi fell 4 per cent as the AI build outgrew the cash that funds it. Lenders still queue for Microsoft, while shareholders punish the cash burners. Washington beat Moscow with public money. Against Beijing, it is borrowing.
AI is finding flaws faster than defenders can patch them, while autonomous agents push past human instructions. From exposed government systems to an Anthropic model that ignored stop signs, the question is who can halt the machine—and who pays when it acts without permission or moves the money.
OpenAI’s Medicare breach has shifted Australia’s AI debate from investment to accountability. As Canberra examines legal options and calls grow for stronger sovereign capability, the question is global: who controls autonomous systems, and who answers when they cross national boundaries?
a16z’s US$1.1 billion Machine Age Fund targets chips, memory, networking, data centres, robotics and power, arguing that AI’s next bottleneck is the physical infrastructure behind the models.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!