Tuesday, April 16, 2024

Firefox 70 Released: Added Integrated Breach Alerts, Social Tracking Protection & Fixed 9 Security Bugs

Mozilla released Firefox 70 with the fixes for security vulnerabilities that affected the previous version of Firefox and added Enhanced Tracking Protection (ETP) by default.

Mozilla fixed 9 vulnerabilities including one critical severity bug, 3 high severity bug, and 5 Moderate level vulnerabilities.

More Security Protection with  Firefox Lockwise

Firefox password management tool called Lockwise improved with more security protection and allows you to create, update, and delete your logins and passwords to sync across all your devices.

Integrated breach protection with Lockwise now alerts you about potentially vulnerable passwords and if it’s exposed in any data breach.

Complex password generation lets you create and save strong passwords for new online accounts.

Social tracking protection, which blocks cross-site tracking cookies from sites like Facebook, Twitter, and LinkedIn, is now a standard feature of Enhanced Tracking Protection.”

More Browser Features

Mozilla added more features including address bar indication for Geo-location when a website uses it.

A stand-alone firefox account menu added that helps users to easily access Firefox services such as Monitor and Send.

Google removed EV indicators Chrome version 77. now Firefox step towards it, starting from Firefox 70 all the green lock icons turned to gray.

Padlock before and After

Improvement with a Core Engine component

Mozilla rolled out the WebRender for Windows users by default on Windows desktops with integrated Intel graphics cards and resolution of 1920×1200 or less) for improved graphics rendering.

Also, Firefox for macOS Compositor improvement helps to speed up page load by as much as 22 percent, and reduce resource use for video by up to 37 percent.

Security Updates

Mozilla fixed totally 9 vulnerabilities that affected Firefox 69 and earlier version:

CVE-2019-15903: Heap overflow in expat library in XML_GetCurrentLineNumber
CVE-2019-11757: Use-after-free when creating index updates in IndexedDB
CVE-2019-11758: Potentially exploitable crash due to 360 Total Security
CVE-2019-11759: Stack buffer overflow in HKDF output
CVE-2019-11760: Stack buffer overflow in WebRTC networking 
CVE-2019-11761: Unintended access to a privileged JSONView object 
CVE-2019-11762: document.domain-based origin isolation has same-origin-property violation 
CVE-2019-11763: Incorrect HTML parsing results in XSS bypass technique
CVE-2019-11764: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2

Users can install the new update via the following links or direct Firefox download page.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and Hacking News update.

Website

Latest articles

Trustifi’s Email Security Awareness Training – Empowering MSPs to Train & Protect Clients

In today's digital landscape, email security has become a critical concern for businesses of...

Personal Data Exposed in Massive Global Hack: Understanding the Implications & Guarding Privacy- Axios Security Group

In a digital age where information is the new currency, the recent global hack...

Ex-Security Engineer Jailed For Hacking Decentralized Cryptocurrency Exchanges

Ahmed exploited a vulnerability in a decentralized cryptocurrency exchange's smart contract by injecting fabricated...

Omni Hotels & Resorts Hack: Attackers have Stolen Customer Information

Omni Hotels & Resorts has revealed that it was the target of a recent...

Connect:fun Attacking Organizations Running Fortinet’s FortiClient EMS

A new exploit campaign has emerged, targeting organizations that utilize Fortinet’s FortiClient EMS.Dubbed...

TA558 Hackers Compromised 320+ Organizations’ FTP & SMTP Servers

TA558, a financially motivated threat actor identified in 2018, is targeting several countries but...

Blackjack Hackers Destroyed 87,000 Sensors Using Lethal ICS Malware

A group of cybercriminals known as "Blackjack" has launched a devastating attack on industrial...
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Top 3 SME Attack Vectors

Securing the Top 3 SME Attack Vectors

Cybercriminals are laying siege to small-to-medium enterprises (SMEs) across sectors. 73% of SMEs know they were breached in 2023. The real rate could be closer to 100%.

  • Stolen credentials
  • Phishing
  • Exploitation of vulnerabilities

Related Articles