Monday, March 4, 2024

Chrome 67 Released With Fix for 34 Security Issues and Support for Password-Free Logins

Chrome team Released the latest stable version of Chrome 67 for Windows, Mac, and Linux. The stable Version 67.0.3396.62 contains a number of improvements and fix for 34 security issues.

Chrome 67 is the first version of the chrome that includes support for passwordless login Web Authentication API, it allows sign into the websites using USB token key, Laptop or smartphone fingerprint sensor and biometric devices.

Mozilla is the first one to add support for WebAuthn with version Firefox 60 and soon to be adopted with Microsoft Edge.

Chrome 67 also adds support for Generic Sensor API it is the universal standard that used n the VR headsets and fitness tracker devices.

Another API is the WebXR Device API the enables developers to create VR and AR experiences on mobile devices and desktops. AR-enabled mobile devices, mobile-based VR headsets like Google Daydream View and Samsung Gear VR, as well as desktop-hosted headsets like Oculus Rift, HTC Vive, and Windows Mixed Reality Headsets.

With Chrome 67 Google depreciated the support for HTTP public key pinning as the Certificate Transparency for all publicly-trusted certificates.

Google also fixed 34 security vulnerabilities, out of the 24 reported by external researchers. Google classified Nine of them as High-Risk vulnerability, twelve as Medium-Risk vulnerability and three low-Risk vulnerability.

Memory usage issue with site isolation was not fixed with Chrome 67, there were about 10-11% higher memory usage in Chrome 67 when isolating all sites with many tabs open. When compared to version 65 the memory usage percentage is slightly down. Site Isolation was introduced with Chrome version 63.

Chrome 67 – Important Upcoming Changes with Chrome

Starting from Chrome 68 which set to release by July 2018, begins to block the third-party software from injecting into chrome and starting from Chrome 72 this option will be removed and it always block code injection.

Chrome 70 to distrust all Symantec SSL/TLS certificates and it is set to release on Aug 30th, 2018.

Related Articles


Latest articles

US Court Orders NSO Group to Handover Code for Spyware, Pegasus to WhatsApp

Meta, the company that owns WhatsApp, filed a lawsuit against NSO Group in 2019....

New SSO-Based Phishing Attack Trick Users into Sharing Login Credentials  

Threat actors employ phishing scams to trick individuals into giving away important details like...

U.S. Charged Iranian Hacker, Rewards up to $10 Million

The United States Department of Justice (DoJ) has charged an Iranian national, Alireza Shafie...

Huge Surge in Ransomware-as-a-Service Attacks targeting Middle East & Africa

The Middle East and Africa (MEA) region has witnessed a surge in ransomware-as-a-service (RaaS)...

New Silver SAML Attack Let Attackers Forge Any SAML Response To Entra ID

SolarWinds cyberattack was one of the largest attacks of the century in which attackers...

AI Worm Developed by Researchers Spreads Automatically Between AI Agents

Researchers have developed what they claim to be one of the first generative AI...

20 Million+ Cutout.Pro User Records Leaked On Hacking Forums

CutOut.Pro, an AI-powered photo and video editing platform, has reportedly suffered a data breach,...
Guru baran
Guru baran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Live Account Takeover Attack Simulation

Live Account Take Over Attack

Live Webinar on How do hackers bypass 2FA ,Detecting ATO attacks, A demo of credential stuffing, brute force and session jacking-based ATO attacks, Identifying attacks with behaviour-based analysis and Building custom protection for applications and APIs.

Related Articles