Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Firefox maker Mozilla has outlined its 2018 roadmap to make the web less intrusive and safer for users. . First up, Mozilla says it will proceed and implement last year's experiment with a breach alerts service, which will warn users when their credentials have been leaked or stolen in a data breach. Mozilla aims to roll out the service around October.. For 2018, Mozilla aims to roll out notification systems for security breaches and boost user privacy initiatives to foster a more secure, less invasive web. Mozilla Firefox Roadmap, Data Breach Alerts, Web Security Innovations. . LinuxSecurity.com Team
A Russian security researcher on Thursday said he has released attack code that exploits a critical vulnerability in the latest version of Mozilla's Firefox browser.. The exploit - which allows attackers to remotely execute malicious code on end user PCs - triggers a heap corruption vulnerability in the popular open-source browser, said Evgeny Legerov, founder of Moscow-based Intevydis. He recently added it as a module to Vulndisco, an add-on to the Immunity Canvas automated exploitation system sold to security professionals. "We've played a lot with it in our labs - it was very reliable," Legerov wrote in an email to The Reg. "Works against the default install of Firefox 3.6. We've tested it on XP and Vista." The report comes as Mozilla pushed out a Firefox update that tackles three critical vulnerabilities in version 3.5.7. One of those bugs is also described as a heap corruption vulnerability, but Legerov said the flaw is different from the one his code exploits. The link for this article located at The Register UK is no longer available. . A vulnerability in Firefox has been discovered that allows malicious actors to execute arbitrary code on users' computers. Learn more about this serious security issue.. Firefox Exploit, Remote Code Execution, Heap Corruption, Cybersecurity Research. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.