Saturday, January 18, 2025
HomeSecurity NewsChrome 67 Released With Fix for 34 Security Issues and Support for...

Chrome 67 Released With Fix for 34 Security Issues and Support for Password-Free Logins

Published on

SIEM as a Service

Follow Us on Google News

Chrome team Released the latest stable version of Chrome 67 for Windows, Mac, and Linux. The stable Version 67.0.3396.62 contains a number of improvements and fix for 34 security issues.

Chrome 67 is the first version of the chrome that includes support for passwordless login Web Authentication API, it allows sign into the websites using USB token key, Laptop or smartphone fingerprint sensor and biometric devices.

Mozilla is the first one to add support for WebAuthn with version Firefox 60 and soon to be adopted with Microsoft Edge.

Chrome 67 also adds support for Generic Sensor API it is the universal standard that used n the VR headsets and fitness tracker devices.

Another API is the WebXR Device API the enables developers to create VR and AR experiences on mobile devices and desktops. AR-enabled mobile devices, mobile-based VR headsets like Google Daydream View and Samsung Gear VR, as well as desktop-hosted headsets like Oculus Rift, HTC Vive, and Windows Mixed Reality Headsets.

With Chrome 67 Google depreciated the support for HTTP public key pinning as the Certificate Transparency for all publicly-trusted certificates.

Google also fixed 34 security vulnerabilities, out of the 24 reported by external researchers. Google classified Nine of them as High-Risk vulnerability, twelve as Medium-Risk vulnerability and three low-Risk vulnerability.

Memory usage issue with site isolation was not fixed with Chrome 67, there were about 10-11% higher memory usage in Chrome 67 when isolating all sites with many tabs open. When compared to version 65 the memory usage percentage is slightly down. Site Isolation was introduced with Chrome version 63.

Chrome 67 – Important Upcoming Changes with Chrome

Starting from Chrome 68 which set to release by July 2018, begins to block the third-party software from injecting into chrome and starting from Chrome 72 this option will be removed and it always block code injection.

Chrome 70 to distrust all Symantec SSL/TLS certificates and it is set to release on Aug 30th, 2018.

Related Articles

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Hackers Easily Bypass Active Directory Group Policy to Allow Vulnerable NTLMv1 Auth Protocol

Researchers have discovered a critical flaw in Active Directory’s NTLMv1 mitigation strategy, where misconfigured...

AWS Warns of Multiple Vulnerabilities in Amazon WorkSpaces, Amazon AppStream 2.0, & Amazon DCV

Amazon Web Services (AWS) has issued a critical security advisory highlighting vulnerabilities in specific...

FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages

Rockstar2FA is a PaaS kit that mimics the legitimate credential-request behavior of cloud/SaaS platforms....

New Tool Unveiled to Scan Hacking Content on Telegram

A Russian software developer, aided by the National Technology Initiative, has introduced a groundbreaking...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

LegionLoader Abusing Chrome Extensions To Deliver Infostealer Malware

LegionLoader, a C/C++ downloader malware, first seen in 2019, delivers payloads like malicious Chrome...

North Korean Hackers Stolen $2.2 Billion From Crypto Platforms In 2024

Cryptocurrency hacking incidents in 2024 surged 21.07% YoY to $2.2 billion, with 303 breaches...

Deloitte Denies Breach, Claims Only Single System Affected

Ransomware group Brain Cipher claimed to have breached Deloitte UK and threatened to publish...