Google is building dynamic patching for Chrome, replacing background sub-processes with updated versions so security fixes land without a full restart.
Auto-Update
Koi Security exposed ShadyPanda, which infected 4.3M+ users by weaponizing trusted browser extensions (WeTab, Clean Master) through auto-updates. The malware performs RCE and exfiltrates data to China.