Chrome 67 Released With Fix for 34 Security Issues and Support for Password-Free Logins

Chrome team Released the latest stable version of Chrome 67 for Windows, Mac, and Linux. The stable Version 67.0.3396.62 contains a number of improvements and fix for 34 security issues.

Chrome 67 is the first version of the chrome that includes support for passwordless login Web Authentication API, it allows sign into the websites using USB token key, Laptop or smartphone fingerprint sensor and biometric devices.

Mozilla is the first one to add support for WebAuthn with version Firefox 60 and soon to be adopted with Microsoft Edge.

Chrome 67 also adds support for Generic Sensor API it is the universal standard that used n the VR headsets and fitness tracker devices.

Another API is the WebXR Device API the enables developers to create VR and AR experiences on mobile devices and desktops. AR-enabled mobile devices, mobile-based VR headsets like Google Daydream View and Samsung Gear VR, as well as desktop-hosted headsets like Oculus Rift, HTC Vive, and Windows Mixed Reality Headsets.

With Chrome 67 Google depreciated the support for HTTP public key pinning as the Certificate Transparency for all publicly-trusted certificates.

Google also fixed 34 security vulnerabilities, out of the 24 reported by external researchers. Google classified Nine of them as High-Risk vulnerability, twelve as Medium-Risk vulnerability and three low-Risk vulnerability.

Memory usage issue with site isolation was not fixed with Chrome 67, there were about 10-11% higher memory usage in Chrome 67 when isolating all sites with many tabs open. When compared to version 65 the memory usage percentage is slightly down. Site Isolation was introduced with Chrome version 63.

Chrome 67 – Important Upcoming Changes with Chrome

Starting from Chrome 68 which set to release by July 2018, begins to block the third-party software from injecting into chrome and starting from Chrome 72 this option will be removed and it always block code injection.

Chrome 70 to distrust all Symantec SSL/TLS certificates and it is set to release on Aug 30th, 2018.

Related Articles

Guru Baran

Guru is an Ex-Security Engineer at Comodo Cybersecurity. Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Burp Suite 2023.6 Released – What’s New!

PortSwigger released a brand-new version of Burp Suite 2023.6 that is intended for both Professional…

17 hours ago

North Korean Hackers Mimic Journalists To Steal Credentials From Organizations

The North Korean APT group Kimsuky has been running a social engineering operation that targets experts…

1 day ago

Over 60,000 Android Apps Silently Install Malware on Devices

Recently, cybersecurity researchers uncovered that over 60,000 Android applications had been stealthily disguised as genuine…

1 day ago

Google Chrome Zero-Day Vulnerability Exploited Widely – Urgent Update

Google has recently taken prompt security measures by releasing a security update for its Chrome…

2 days ago

MOVEit Hack – BBC, British Airways Employees Contact and Financial Data Exposed

A major MOVEit Hack has impacted many businesses, notably the BBC, British Airways, Boots, and…

2 days ago

10 Best Vulnerability Scanner Tools For Penetration Testing – 2023

A Vulnerability Scanner Tools is one of the essential tools in IT departments Since vulnerabilities…

2 days ago