Updated March 15: Following the confirmation of two Chrome browser zero-days, already being exploited by attackers and resulting in an emergency security update rollout, this article has been updated as the Cybersecurity and Infrastructure Security Agency has urged all organizations to update as soon as possible.

Updated March 14: Following the confirmation of two Chrome browser zero-days, already being exploited by attackers and resulting in an emergency security update rollout, this article has been updated to include details of millions of dollars paid by Google for vulnerability disclosures.

A zero-day security vulnerability is being exploited in ongoing attacks, posing a "significant cyber threat targeting federal networks utilizing certain Cisco systems and software," according to U.