Google Chrome and Microsoft Edge both shipped new stable releases in September, part of the steady multi-week cadence that quietly patches security holes as much as it adds features. A browser is the single piece of software most workers use all day, which makes it one of the most attacked.
Most of what a browser update delivers is invisible: closed vulnerabilities that would otherwise let a booby-trapped web page reach the computer behind it.
What it means: the cheapest security control a business has is letting browsers update themselves and restarting them so the fix takes effect. An out-of-date browser left open for weeks is one of the easiest ways in for an attacker, and closing it costs nothing.