Cyber security news for all


    Several security gaps in Firefox ESR

    If you browse the internet with Firefox, you should update the Firefox ESR promptly. The developers have closed several security gaps in current versions.

    Users should update their browser as soon as possible.The latest update corrects some security gaps that have already been actively exploited. However, a lot of information is currently not available.

    Mozilla Has Also Increased The Range Of Functions

    If attacks work, attackers could cause the browser to crash or even execute malicious code. By successfully exploiting a security vulnerability in the open source crypto library Network Security Services (NSS), attackers could gain access to private keys. To do this, they would have to evaluate calculation times when generating signatures in the form of a timing attack. Mozilla does not explain what these and other attacks could look like in the warning message. The versions of Firefox are protected. In addition to security, Mozilla has also increased the range of functions in the current versions.

    Firefox ESR Based Vulnerabilities

    The browser is also affected by the vulnerabilities because it is based on Firefox ESR. With the browser you surf the internet anonymously. For this purpose, the browser routes all data traffic encrypted over the network. The browser also includes functions against tracking. As the blog post from the developers shows, they have not only closed security holes. Admins from websites can now secure their pages even more efficiently using extended authentication options. In addition, there is now a new naming scheme for some websites, so that the URLs are easier to remember.

    The vulnerability can be exploited to execute arbitrary code on the affected systems. Successfully exploiting one of the vulnerabilities could allow attackers to compromise vulnerable systems. How likely this scenario is, however it is currently still completely uncertain, as further details on the security vulnerabilities are still missing.

    Recent Articles

    Personnel were asked to removed 89 apps which includes Instagram, Facebook, and others by the Indian Army

    Personnel are told by the Indian Army to delete 89 apps from their phones from July 15. This is in a bid to avoid...

    The warning sent to employees about Tiktok app was a mistake says Amazon

    On Friday morning, Amazon sent out a memo to its employees, asking them to uninstall the popular social media app TikTok off their phone....

    Other Android phones sold in the US contains pre-installed malware

    There’s a discovery of Pre-installed malware on another phone by researchers from Malwarebytes; through the lifeline Assistance program for sale in the United States....

    About 15 billion stolen passwords and usernames sold on the dark web.

    A recent finding has shown that about 15 billion passwords and usernames are distributed on the dark web. This compromise will bring about credential...

    Hundreds of multinational companies aimed by Russian BEC Gang

    According to the security firm Agari, there has been a discovery of a newly uncovered Russia-based business email compromise gang; BEC gang that scams...

    Related Stories

    Leave A Reply

    Please enter your comment!
    Please enter your name here

    Stay on op - Ge the daily news in your inbox