Advertisement
Top

Tag: Firefox


Application security, Security

New Mozilla Feature Blocks Risky Add-Ons on Specific Websites to Safeguard User Security

July 10, 2023

Via: The Hacker News

Mozilla has announced that some add-ons may be blocked from running on certain sites as part of a new feature called Quarantined Domains. “We have introduced a new back-end feature to only allow some extensions monitored by Mozilla to run […]


Network security, Security

6 cybersecurity and privacy Firefox add-ons you need to know about

March 6, 2023

Via: Help Net Security

In today’s digital age, cybersecurity and privacy have become major concerns for internet users. With the increase in cyber attacks and data breaches, it is vital to protect your online privacy and security. One way to do this is by […]


Threats & Malware, Vulnerabilities

Mozilla fixes Firefox zero-days exploited in the wild (CVE-2022-26485, CVE-2022-26486)

March 7, 2022

Via: Help Net Security

Mozilla has released an out-of-band security update for Firefox, Firefox Focus, and Thunderbird, fixing two critical vulnerabilities (CVE-2022-26485, CVE-2022-26486) exploited by attackers in the wild. About the vulnerabilities (CVE-2022-26485, CVE-2022-26486) The two patched zero-days are both memory corruption bugs of […]


Hacker, Threats & Malware, Vulnerabilities

Chinese Hackers Using Firefox Extension to Spy On Tibetan Organizations

February 25, 2021

Via: The Hacker News

Cybersecurity researchers today unwrapped a new campaign aimed at spying on vulnerable Tibetan communities globally by deploying a malicious Firefox extension on target systems. “Threat actors aligned with the Chinese Communist Party’s state interests delivered a customized malicious Mozilla Firefox […]


Threats & Malware, Vulnerabilities

Critical Firefox Vulnerability Can Allow Code Execution If Chained With Other Bugs

February 9, 2021

Via: Security Week

In its advisory for the vulnerability — the bug currently does not have a CVE identifier — Mozilla described it as a “buffer overflow in depth pitch calculations for compressed textures.” The issue, reported by researchers Abraruddin Khan and Omair […]


Threats & Malware, Virus & Malware

Watch Out! Adrozek Malware Hijacking Chrome, Firefox, Edge, Yandex Browsers

December 11, 2020

Via: The Hacker News

Microsoft on Thursday took the wraps off an ongoing campaign impacting popular web browsers that stealthily injects malware-infested ads into search results to earn money via affiliate advertising. “Adrozek,” as it’s called by the Microsoft 365 Defender Research Team, employs […]


Threats & Malware, Vulnerabilities

Vulnerabilities Exploited at Chinese Hacking Contest Patched in Firefox, Chrome

November 11, 2020

Via: Security Week

The Firefox vulnerability, tracked as CVE-2020-26950, has been described as an issue related to write side effects in MCallGetProperty opcode not being accounted for. “In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable […]


Cyber-crime, Malware, Phishing

Mozilla Discontinues Firefox Feature Abused in Malware, Phishing Attacks

September 21, 2020

Via: Security Week

Firefox Send, the browser maker reveals, is being discontinued because it has been abused for delivering malware and phishing attacks. The feature was designed for encrypted file sharing and became popular among a loyal set of users, Mozilla says. However, […]


Threats & Malware, Vulnerabilities

Cisco discloses technical details for Firefox code execution flaw

June 11, 2020

Via: Security Affairs

Security experts from Cisco Talos have released technical details on a recently addressed vulnerability in Firefox, tracked as CVE-2020-12405, that could be exploited by attackers for remote code execution. The issue is a use-after-free in SharedWorkerService flaw and received a […]


Threats & Malware, Vulnerabilities

Mozilla offers bigger rewards for Firefox flaws under its bug bounty program

April 24, 2020

Via: Security Affairs

Mozilla announced some major changes to its bug bounty program that was first launched in 2004. The organization paid out $965,750 for roughly 350 vulnerabilities, the average payout for each issue was approximately $2,700. Now Mozilla has increased the maximum […]


Threats & Malware, Vulnerabilities

Mozilla banned hundreds of malicious Firefox add-ons over the last weeks

January 27, 2020

Via: Security Affairs

Over the past two weeks, Mozilla has reviewed and banned 197 Firefox add-ons because they were executing malicious code. The malicious Firefox add-ons were found stealing user data and for this reason, they were removed from the Mozilla Add-on (AMO) […]


Application security, Security, Threats & Malware, Vulnerabilities

Mozilla patches actively exploited Firefox zero-day

January 9, 2020

Via: Help Net Security

Mozilla has patched a Firefox zero-day vulnerability (CVE-2019-17026) that is being exploited in attacks in the wild and is urging Firefox and Firefox ESR users to update their installations as soon as possible. About CVE-2019-17026 A day after Mozilla released […]


Mobile, Network security, Privacy protection

Firefox now blocks third-party tracking cookies, cryptomining scripts by default

September 4, 2019

Via: Help Net Security

It took a lot of testing and tweaking, but Mozilla’s Firefox browser is finally being delivered with Enhanced Tracking Protection and a web-based cryptomining blocking feature on by default. The changes “Enhanced Tracking Protection works behind-the-scenes to keep a company […]


Data loss, Threats & Malware, Vulnerabilities

Old known issue in Firefox allows HTML files to steal other files from victim’s system

July 4, 2019

Via: Security Affairs

The security expert Barak Tawily demonstrated that opening an HTML file on Firefox could allow attackers to steal files stored on a victim’s computer due to a 17-year-old known bug in the browser. The researcher published the details of the […]


Threats & Malware, Vulnerabilities

Mozilla plugs critical Firefox zero-day used in targeted attacks

June 19, 2019

Via: Help Net Security

A critical Firefox zero-day remote code execution vulnerability is being abused in targeted attacks in the wild, Mozilla has warned on Tuesday. About the vulnerability (CVE-2019-11707) Mozilla did not share many details about the flaw – it simply stated that […]


Network security

Mozilla Confirms Premium Firefox Browser With Security Features

June 11, 2019

Via: Threat Post

Mozilla Corporation is launching a premium version of the Firefox browser that will tout improved security features such as virtual private network and secure cloud storage, according to CEO Chris Beard. In a Friday interview with German media publication T3N, […]


Mobile security

Mozilla and Google Browsers Get Security, Anti-Tracking Boosts

June 6, 2019

Via: Threat Post

Browsers Firefox and Chrome received updates this week, both adding security and privacy tools that help with password management and help block sites that track users. Mozilla’s Firefox browser introduced an “Enhanced Tracking Protection” feature that blocks over 1,000 third-party […]


Vulnerabilities

Audit Finds No Critical Flaws in Firefox Update System

October 12, 2018

Via: Security Week

An audit commissioned by Mozilla for the Firefox update system revealed no critical vulnerabilities and the flaws rated “high severity” were not easy to exploit. Experts at Germany-based X41 spent 27 days analyzing the Firefox Application Update Service (AUS), including […]


Application security

Firefox DoS issue crashes the browser and sometimes the Windows OS

September 24, 2018

Via: Security Affairs

A security researcher discovered a bug affecting Firefox on Mac, Linux, and Windows that could crash the browser and in some cases the underlying OS. The security researcher Sabri Haddouche from Wire discovered a bug that affects Firefox on Mac, […]


Cloud security

Firefox Saves Screenshots to Publicly Accessible Cloud Servers

May 16, 2018

Via: Security Week

Mozilla’s Firefox browser allows users to take screenshots of entire pages or sections of pages and save them to the cloud, but is making them publicly accessible by default, an ethical hacker has discovered. Introduced in the browser last fall, […]