Sunday, October 6, 2024
HomeSecurity NewsChrome 67 Released With Fix for 34 Security Issues and Support for...

Chrome 67 Released With Fix for 34 Security Issues and Support for Password-Free Logins

Published on

Chrome team Released the latest stable version of Chrome 67 for Windows, Mac, and Linux. The stable Version 67.0.3396.62 contains a number of improvements and fix for 34 security issues.

Chrome 67 is the first version of the chrome that includes support for passwordless login Web Authentication API, it allows sign into the websites using USB token key, Laptop or smartphone fingerprint sensor and biometric devices.

Mozilla is the first one to add support for WebAuthn with version Firefox 60 and soon to be adopted with Microsoft Edge.

Chrome 67 also adds support for Generic Sensor API it is the universal standard that used n the VR headsets and fitness tracker devices.

- Advertisement - EHA

Another API is the WebXR Device API the enables developers to create VR and AR experiences on mobile devices and desktops. AR-enabled mobile devices, mobile-based VR headsets like Google Daydream View and Samsung Gear VR, as well as desktop-hosted headsets like Oculus Rift, HTC Vive, and Windows Mixed Reality Headsets.

With Chrome 67 Google depreciated the support for HTTP public key pinning as the Certificate Transparency for all publicly-trusted certificates.

Google also fixed 34 security vulnerabilities, out of the 24 reported by external researchers. Google classified Nine of them as High-Risk vulnerability, twelve as Medium-Risk vulnerability and three low-Risk vulnerability.

Memory usage issue with site isolation was not fixed with Chrome 67, there were about 10-11% higher memory usage in Chrome 67 when isolating all sites with many tabs open. When compared to version 65 the memory usage percentage is slightly down. Site Isolation was introduced with Chrome version 63.

Chrome 67 – Important Upcoming Changes with Chrome

Starting from Chrome 68 which set to release by July 2018, begins to block the third-party software from injecting into chrome and starting from Chrome 72 this option will be removed and it always block code injection.

Chrome 70 to distrust all Symantec SSL/TLS certificates and it is set to release on Aug 30th, 2018.

Related Articles

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Prince Ransomware Hits UK and US via Royal Mail Phishing Scam

A new ransomware campaign targeting individuals and organizations in the UK and the US...

Microsoft, DOJ Dismantle Domains Used by Russian FSB-Linked Hacking Group

Microsoft and the U.S. Department of Justice (DOJ) have successfully dismantled a network of...

Cloud Penetration Testing Checklist – 2024

Cloud Penetration Testing is a method of actively checking and examining the Cloud system...

Linux Malware perfctl Attacking Millions of Linux Servers

Researchers have uncovered a sophisticated Linux malware, dubbed "perfctl," actively targeting millions of Linux...

Free Webinar

Decoding Compliance | What CISOs Need to Know

Non-compliance can result in substantial financial penalties, with average fines reaching up to $4.5 million for GDPR breaches alone.

Join us for an insightful panel discussion with Chandan Pani, CISO - LTIMindtree and Ashish Tandon, Founder & CEO – Indusface, as we explore the multifaceted role of compliance in securing modern enterprises.

Discussion points

The Role of Compliance
The Alphabet Soup of Compliance
Compliance
SaaS and Compliance
Indusface's Approach to Compliance

More like this

Critical PDF.js & React-PDF Vulnerabilities Threaten Millions Of PDF Users

A new critical vulnerability has been discovered in PDF.js, which could allow a threat...

LayerX Security Raises $26M for its Browser Security Platform, Enabling Employees to Work Securely From Any Browser, Anywhere

LayerX, pioneer of the LayerX Browser Security platform, today announced $24 million in Series...

Email Header Analysis – Verify Received Email is Genuine or Spoofed

Email Header Analysis highly required process to prevent malicious threats since Email is...