fbpx
Frame-14

Privacy Ninja

        • DATA PROTECTION

        • CYBERSECURITY

        • Penetration Testing

          Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

Firefox 85 Adds Supercookie Protection, Removes Flash Support

Firefox 85 Adds Supercookie Protection, Removes Flash Support

Mozilla Firefox 85 was released today with supercookie protection to block hidden trackers from tracking Firefox users’ activity while browsing the Internet.

Windows, Mac, and Linux desktop users can upgrade to Firefox 85 by going to Options -> Help -> About Firefox. The browser will automatically check for the new update and install it when available.

With the release of Firefox 85, all other Firefox development branches have also moved up a version bringing Firefox Beta to version 86 and the Nightly builds to version 87.

You can download Firefox 85 from the following links:

If the download links above haven’t yet been updated to download the latest Firefox version, you can manually download it from Mozilla’s official FTP release directory.

Also Read: Computer Misuse Act Singapore: The Truth And Its Offenses

Below you can find the major changes and improvements in Firefox 85 — if you want to read the full release notes, you can do so here.

Built-in protection from supercookies

“Firefox now protects you from supercookies, a type of tracker that can stay hidden in your browser and track you online, even after you clear cookies,” the released notes read.

“By isolating supercookies, Firefox prevents them from tracking your web browsing from one site to the next.”

Mozilla has been fighting against online tracking and adtech companies since 2018 by enabling Firefox to automatically block cookies from known trackers via enhanced tracking protection enabled by default.

Starting with Firefox 72 launched one year ago in January 2020, the web browser is also auto-blocking scripts designed by known fingerprinting companies for browser fingerprinting via cross-site tracking.

With the release of Firefox 85, Mozilla’s browser is isolating caches and network connections for each visited website. This makes supercookies useless for tracking users while browsing between sites.

“In short, supercookies can be used in place of ordinary cookies to store user identifiers, but they are much more difficult to delete and block,” Mozilla’s Steven Englehardt and Arthur Edelstein explained. 

“Over the years, trackers have been found storing user identifiers as supercookies in increasingly obscure parts of the browser, including in Flash storage, ETags, and HSTS flags.”

Other new features and changes in Firefox 85

The other highlight of this Firefox release is the removal of Adobe Flash support. The new Firefox version ships without Flash support, thus improving the browser’s performance and security.

Adobe’s Flash Player reached its end of life (EOL) on January 1, 2021, after being a constant security risk over the years.

Adobe is  displaying alerts on Windows computers advising users to “immediately” uninstall Flash Player from their systems and has removed all Flash Player download pages from its websites.

Starting with this Firefox release, there is no setting available for users who want to re-enable Flash support.

Firefox 85 also allows users to remove all saved logins with a single mouse click and improves bookmark management.

Fixes high severity vulnerabilities

Firefox 85 also addresses multiple security vulnerabilities with severity ratings ranging from low to high severity.

The most severe ones, CVE-2021-23964 and CVE-2021-23965, are caused by memory safety bugs that would have allowed attackers to execute arbitrary code remotely on systems running vulnerable Firefox versions.

“Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code,” Mozilla explained.

Also Read: Personal Data Websites: 3 Things That You Must Be Informed

Mozilla also fixed a vulnerability (tracked as CVE-2021-23955) that could have enabled attackers to launch clickjacking attacks across tabs through misusing requestPointerLock.

0 Comments

KEEP IN TOUCH

Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection

REPORTING DATA BREACH TO PDPC?

We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.
×

Hello!

Click one of our contacts below to chat on WhatsApp

× Chat with us