Cyber Security News

Mozilla Releases Firefox 149.0 With Free Built‑In VPN Offering 50 GB Monthly Data

Mozilla released Firefox 149.0 to the Release channel, bringing a significant set of privacy and security enhancements to the browser.

The standout feature of this update is the integration of a free, built-in VPN designed to protect users on public networks and secure sensitive browsing activities.

The new built-in VPN routes web traffic through a secure proxy to hide user IP addresses and location data.

Users receive 50 GB of protected data per month and can toggle the VPN on or off for specific websites.

This privacy feature is currently undergoing a progressive rollout for users in the United States, United Kingdom, Germany, and France, allowing Mozilla to gather early feedback and resolve potential bugs before a global release.

Beyond the VPN, Firefox 149.0 introduces robust defenses against web-based threats.

The browser now leverages SafeBrowsing data to automatically block background notifications from flagged malicious websites.

By permanently revoking these permissions, Firefox mitigates the risk of unsafe sites deploying spam, unwanted advertisements, or phishing attempts.

Furthermore, Mozilla has strengthened internal browser security by tightening the requirements for JavaScript files loaded in the parent process, adding a crucial layer of defense-in-depth against potential exploits.

Users can also monitor site safety more easily using the new TrustPanel, which merges privacy and security settings into a single, accessible interface directly from the address bar.

The release delivers several substantial usability and developer improvements.

A new Split View function allows users to view two pages side-by-side within a single window, streamlining research and multi-tasking workflows.

Under the hood, the update increases the robustness of HTTP/3 upload performance during unstable network conditions and introduces the Reporting API, providing web applications with a standardized mechanism to monitor Content Security Policy violations and feature deprecations.

Feature OverviewCategoryTechnical Description
Built-in VPNPrivacyProvides 50 GB of monthly proxy-routed data for protected browsing.
Malicious Site BlockingSecurityRevokes notification permissions for sites flagged by SafeBrowsing.
JS Loading RestrictionsSecurityTightens requirements for JavaScript executed in the parent process.
TrustPanelUI/UXCombines page-specific privacy and security settings in the address bar.
Reporting APIWeb PlatformStandardizes platform feature reporting for Content Security Policies.
Split ViewProductivityEnables side-by-side tab viewing within a single browser window.

Additionally, Firefox 149.0 includes platform-specific integrations and performance upgrades.

On Linux systems, the browser defaults to the XDG portal file picker for better desktop environment integration, while Windows users benefit from the modern Windows.Devices.Geolocation API for location services.

General performance sees a boost with significantly faster PDF loading times driven by hardware acceleration.

For developers, the Storage Inspector toolbar now includes a dedicated button to instantly clear selected storage entries.

Finally, this version addresses multiple underlying vulnerabilities through routine security fixes outlined in advisory MFSA2026-20, ensuring a hardened and stable browsing environment.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Microsoft Paint Vulnerability Allows Hackers to Execute Malicious Code Remotely Without User Interaction

Microsoft has announced a vulnerability in Windows Paint that could let unauthenticated attackers execute malicious…

4 minutes ago

ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers

An autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is…

35 minutes ago

Shopify Makes IP Allowlisting Mandatory for All Public Apps to Prevent Stolen API Token Abuse

Shopify is making IP allowlisting mandatory for all public apps to limit abuse of stolen…

44 minutes ago

OpenAI’s New GPT-6 Cyber Finds 81 High-Severity Firefox Vulnerabilities and 948 Linux Kernel Exploits

OpenAI has introduced GPT-6 Cyber, a security-focused model built to find and validate exploitable vulnerabilities…

59 minutes ago

OpenMatter Network Positions Decentralized Computing as an Alternative to Data Centers for AI

Melbourne, Florida, November 5th, 2026, CyberNewswire OpenMatter Network, a pioneer in decentralized infrastructure for agentic…

13 hours ago

China-Aligned Hackers Hijack Popular Sogou Keyboard Software to Secretly Install DarkVigil Malware

A China-aligned espionage group abused the update traffic of Sogou Input Method, one of China's…

18 hours ago