Geeks for your information

Full Version: Chrome 87 released with fix for NAT Slipstream attacks, broader FTP deprecation
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Quote:Google has released today version 87 of its Chrome browser, a release that comes with a security fix for the NAT Slipstream attack technique and a broader deprecation of the FTP protocol.
 
Todays' release is available for Windows, Mac, Linux, Chrome OS, Android, and iOS. Users can update to the new version via Chrome's built-in update utility.
 
While in previous versions, Google has shipped some changes to Chrome settings and UI elements, almost all the major new Chrome 87 features are aimed at web developers.
 
In Chrome 87, we have new APIs and updates to Chrome's built-in Developer Tools, such as:
  • Support for the new Cookie Store API;
  • New features to allow easier modification of web fonts via CSS;
  • A new feature to let websites enumerate all the locally installed fonts;
  • Support for pan, tilt, and zoom controls on webcam streams; and,
  • Support for debugging WebAuthn operations via the Chrome DevTools.
Chrome 87 also comes with a fix for a new attack disclosed at the end of October by Samy Kamkar, a famous security researcher and computer hacker.
Named NAT Slipstream, this technique allows attackers to bypass firewalls and make connections to internal networks by tricking users into accessing malicious sites — effectively turning Chrome into a proxy for attackers. [...]

Read more: https://www.zdnet.com/article/chrome-87-...precation/