“The security flaw responsible for this urgent release is already actively exploited on Windows systems. Tor Browser users should upgrade to version 6.0.7. The exploit code has been made public, and cyber criminals are likely to start using it soon – if they aren’t already. But, according to GData Software researchers, no persistent threat is left on the target computer, as everything is done in memory.įirefox users should upgrade to version 50.0.2, Firefox ESR users to version 45.5.1, and Thunderbird users to version 45.5.1, as soon as possible. The use-after-free, remote code execution flaw is likely being exploited to reveal information about the machine (MAC address), and through it the identity of its user.

The vulnerability (CVE-2016-9079) affects SVG Animation module in Firefox and in Tor Browser, since the latter is based on the former (specifically, on the Firefox ESR browser). It is still unknown who started wielding the exploit initially, although it’s similarity to a previous one used by the FBI in 2013 to target users of hidden services seems to point in that direction. Mozilla and the Tor Project have released security updates that fix the Firefox 0-day flaw that was spotted being exploited to de-anonymize Tor Browser users.

2016 best tor browser