Hackers Are Abusing a Bug in Firefox to Take Over Computers


Mozilla Firefox has released a security update which is so important that even the Department of Homeland Security says you should download it. Mozilla Firefox has been dealing with a serious vulnerability that hackers were exploiting that serious bug in the browser to take over computers.

As per the report, the vulnerability deals with a Javascript compiler in the browser, which can be used to run malware or crash a computer. “We are aware of targeted attacks in the wild abusing this flaw,” Firefox developer Mozilla warned in an advisory on Wednesday. And now, the company finally pushes a patch fixing this update.

Specifically, the bug can trigger a “type confusion” flaw, which is when a software program blindly runs a piece of incompatible code. In Firefox’s case, the affected compiler is designed to take Javascript code on a web page and convert it to an executable program, which can run directly inside the browser.

“This typically improves performance, often noticeably,” security firm Sophos wrote in a blog post. But the same process can pose a security risk. If you can trick the compiler into running bad code, then you can also dupe the browser into running malware. “That’s why crooks love to probe for flaws in JIT (Javascript Just-in-Time) systems,” Sophos added.

However, it remains unclear how the hackers were exploiting the bug, but they likely created a malicious website to trigger the flaw and then tricked unsuspecting users into visiting it.

To let you remain safe from being exploited, you should update to Firefox version 72.0.1; enterprise users on Firefox ESR should be on version 68.4.1. Update by going to the “About Firefox” option in the browser, which is under the “Help” tab for Windows users and the “Firefox” tab for Mac users. It’s also possible the browser may have already initiated an automatic update. However, it is advised you to check this manually.

For the latest tech news and updates, Install TechCodex App and follow us on Facebook and Twitter. Also, if you like our efforts, consider sharing this story with your friends, this will encourage us to bring more exciting updates for you.

Source Source

Get real time updates directly on you device, subscribe now.

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. AcceptRead More