If your small business is using any but the latest, just-patched version of Firefox, you need to update now. That directive comes from no less than the United States Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA).
Whether you use Windows or Mac, older versions of Firefox for desktop contain a critical vulnerability that allows attackers to take control of a user’s entire operating system. This nightmare scenario is already playing out, hence the urgent warning from Homeland Security.
Mozilla has released security updates to address a vulnerability in Firefox and Firefox ESR. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability was detected in exploits in the wild.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Mozilla Security Advisory for Firefox 72.0.1 and Firefox ESR 68.4.1 and apply the necessary updates.
Mozilla itself says: “We are aware of targeted attacks in the wild abusing this flaw.”
To upgrade your Firefox browser:
- On a Mac: launch Firefox and click About > Firefox and click the “Restart to update Firefox” button.
- On a PC: launch Firefox and go under either Options > Firefox Updates or Options > Advanced > Update to update Firefox.
The version you want to be running is Firefox 72.0.1 and Firefox ESR 68.4.1 or higher. Firefox browsers for mobile devices are not known to be affected.