SIGforum
Hackers are targeting a major security flaw in Mozilla Firefox

This topic can be found at:
https://sigforum.com/eve/forums/a/tpc/f/320601935/m/4040013564

January 11, 2020, 08:00 AM
Pipe Smoker
Hackers are targeting a major security flaw in Mozilla Firefox
“Mozilla has been forced to rush out a fix to its Firefox browser after it was revealed a critical vulnerability was allowing hackers to target users.

The US Cybersecurity and Infrastructure Security Agency (CISA) revealed the vulnerability could allowed criminals to seize total control of the browser.

Mozilla said it had found evidence that hackers were actively exploiting the vulnerability in 'targeted attacks' against users.

Mozilla prides itself on stringent security protocols and ushered out an automatic update with a patch for the vulnerability.

Users are urged to update the browser manually to ensure they are fully protected from any attacks.”

https://mol.im/a/7873427



Serious about crackers.
January 11, 2020, 08:31 AM
henryaz
 
The latest (patched) version is 72.0.1. If you are not running that version, you should upgrade to it posthaste.



When in doubt, mumble
January 11, 2020, 09:02 AM
Killer
How do you find out what version you are running?
January 11, 2020, 09:19 AM
hairy2dawg
quote:
Originally posted by Killer:
How do you find out what version you are running?


Click on the 3 line bar under the browser X. Go to "help". Click on the bottom option "about". Version should pop up on the screen.
January 11, 2020, 09:21 AM
Killer
Got it, thank you very much, hairy2dawg.
January 11, 2020, 09:32 AM
airbubba
mine updated a few days ago.
January 11, 2020, 10:35 AM
41
Go here and type in your email address and see the date and data breach:

https://monitor.firefox.com/


41
January 11, 2020, 12:56 PM
ffips
quote:
Originally posted by 41:
Go here and type in your email address and see the date and data breach:

https://monitor.firefox.com/


41, this isn't an attack, but an honest question. Are these types of sites legit or yet another data mining resource? To just willy nilly wander the internet inputting one's email address seems less than beneficial. Why would a firefox (browser) user need to input email (non-browser) to determine if a browser has been compromised? Now, tell me that online purchase information has been compromised and request info more along the lines of confirming some recent purchases made by showing me data based on my name, maybe a bit more legit. For example, "ffips, your recent online purchase history includes X for $, Y for $$, and Z for $$$. If this matches your history, you may have been compromised."

Be careful with your info, others definitely aren't. Smile
January 11, 2020, 07:07 PM
henryaz
quote:
Originally posted by hairy2dawg:
quote:
Originally posted by Killer:
How do you find out what version you are running?


Click on the 3 line bar under the browser X. Go to "help". Click on the bottom option "about". Version should pop up on the screen.

On a Mac, click on the menu item labeled Firefox, the one all the way to the left. The first choice under it is "About Firefox".



When in doubt, mumble
January 11, 2020, 07:47 PM
gjgalligan
quote:
Originally posted by hairy2dawg:
quote:
Originally posted by Killer:
How do you find out what version you are running?


Click on the 3 line bar under the browser X. Go to "help". Click on the bottom option "about". Version should pop up on the screen.


Missed the help part.

Thanks!!


Integrity is doing the right thing, even when nobody is looking.
January 11, 2020, 08:18 PM
bald1
My Windows, Linux, and Android versions all were updated a few days ago. Good to go! Smile



Certifiable member of the gun toting, septuagenarian, bucket list workin', crazed retiree, bald is beautiful club!
USN (RET), COTEP #192
January 12, 2020, 06:47 AM
opticsguy
I'm still running V 47 of Firefox because that's one of the last versions that you can override Mozilla's blacklist of add-ons and install NoScript, the useful Adblock Plus (newer versions are crap), and Ublock Origin.

I would think stopping unwanted scripts from running is better protection than trusting Mozilla to find every vulnerability in every new feature.