Friday, October 16, 2026

Mozilla Releases Firefox 149.0 With Free Built‑In VPN Offering 50 GB Monthly Data

Mozilla released Firefox 149.0 to the Release channel, bringing a significant set of privacy and security enhancements to the browser.

The standout feature of this update is the integration of a free, built-in VPN designed to protect users on public networks and secure sensitive browsing activities.

The new built-in VPN routes web traffic through a secure proxy to hide user IP addresses and location data.

Users receive 50 GB of protected data per month and can toggle the VPN on or off for specific websites.

This privacy feature is currently undergoing a progressive rollout for users in the United States, United Kingdom, Germany, and France, allowing Mozilla to gather early feedback and resolve potential bugs before a global release.

Beyond the VPN, Firefox 149.0 introduces robust defenses against web-based threats.

The browser now leverages SafeBrowsing data to automatically block background notifications from flagged malicious websites.

By permanently revoking these permissions, Firefox mitigates the risk of unsafe sites deploying spam, unwanted advertisements, or phishing attempts.

Furthermore, Mozilla has strengthened internal browser security by tightening the requirements for JavaScript files loaded in the parent process, adding a crucial layer of defense-in-depth against potential exploits.

Users can also monitor site safety more easily using the new TrustPanel, which merges privacy and security settings into a single, accessible interface directly from the address bar.

The release delivers several substantial usability and developer improvements.

A new Split View function allows users to view two pages side-by-side within a single window, streamlining research and multi-tasking workflows.

Under the hood, the update increases the robustness of HTTP/3 upload performance during unstable network conditions and introduces the Reporting API, providing web applications with a standardized mechanism to monitor Content Security Policy violations and feature deprecations.

Feature OverviewCategoryTechnical Description
Built-in VPNPrivacyProvides 50 GB of monthly proxy-routed data for protected browsing.
Malicious Site BlockingSecurityRevokes notification permissions for sites flagged by SafeBrowsing.
JS Loading RestrictionsSecurityTightens requirements for JavaScript executed in the parent process.
TrustPanelUI/UXCombines page-specific privacy and security settings in the address bar.
Reporting APIWeb PlatformStandardizes platform feature reporting for Content Security Policies.
Split ViewProductivityEnables side-by-side tab viewing within a single browser window.

Additionally, Firefox 149.0 includes platform-specific integrations and performance upgrades.

On Linux systems, the browser defaults to the XDG portal file picker for better desktop environment integration, while Windows users benefit from the modern Windows.Devices.Geolocation API for location services.

General performance sees a boost with significantly faster PDF loading times driven by hardware acceleration.

For developers, the Storage Inspector toolbar now includes a dedicated button to instantly clear selected storage entries.

Finally, this version addresses multiple underlying vulnerabilities through routine security fixes outlined in advisory MFSA2026-20, ensuring a hardened and stable browsing environment.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud Servers

A critical unauthenticated OS command injection flaw in Collabora...

Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows Credentials

A likely Russian-speaking threat actor used hundreds of AI...

Microsoft Disrupts CoGUI Phishing Kit Linked to Over 100 Million Malicious Emails a Month

Microsoft and international partners have disrupted infrastructure supporting CoGUI....

12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing

NowSecure and Data Theorem mobile security lead automated mobile...

12 Best SBOM Tools Compared (2026): Features & Pricing

Anchore’s Syft SBOM generator is the free generation standard,...

12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing

Your CI platform’s native controls (GitHub Advanced Security, GitLab...

Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer

The Aoki infostealer, also known as Aokigahara, has expanded...

Related Articles

Recent News