Security issue fixed in late June, with the release of Chrome OS 75. Additional remediation steps below. Source / Zdnet