SoylentNews

An Anonymous Coward writes:

https://www.bleepingcomputer.com/news/software/mozilla-warns-users-to-update-firefox-before-certificate-expires/

  By Bill Toulas

        March 12, 2025 11:01 AM

Mozilla is warning Firefox users to update their browsers to the latest version to avoid facing disruption and security risks caused by the upcoming expiration of one of the company's root certificates.

The Mozilla certificate is set to expire this Friday, March 14, 2025, and was used to sign content, including add-ons for various Mozilla projects and Firefox itself.

Users need to update their browsers to Firefox 128 (released in July 2024) or later and ESR 115.13 or later for 'Extended Support Release' (ESR) users.

"On 14 March a root certificate (the resource used to prove an add-on was approved by Mozilla) will expire, meaning Firefox users on versions older than 128 (or ESR 115) will not be able to use their add-ons," warns a Mozilla blog post.

"We want developers to be aware of this in case some of your users are on older versions of Firefox that may be impacted."

A Mozilla support document explains that failing to update Firefox could expose users to significant security risks and practical issues, which, according to Mozilla, include:

        Malicious add-ons can compromise user data or privacy by bypassing security protections.
        Untrusted certificates may allow users to visit fraudulent or insecure websites without warning.
        Compromised password alerts may stop working, leaving users unaware of potential account breaches.

Users are recommended to check and confirm they're running Firefox version 128 and later via Menu > Help > About Firefox. This action should also automatically trigger a check for updates.

It is noted that the problem impacts Firefox on all platforms, including Windows, Android, Linux, and macOS, except for iOS, where there's an independent root certificate management system.

Mozilla says that users relying on older versions of Firefox may continue using their browsers after the expiration of the certificate if they accept the security risks, but the software's performance and functionality may be severely impacted.

"We strongly advise you to update to the latest version to avoid these issues and ensure your browser stays secure and efficient," advises Mozilla.

Mozilla has also set up a support thread for users who encounter problems or need help updating their Firefox browsers.

Users of Firefox-based browsers like Tor, LibreWolf, and Waterfox should also ensure they're running a version based on Firefox 128 and later.

Original Submission

The suspect in the New Orleans attack that killed 15 people on New Year's Day did not act alone, US investigators believe.

Shamsud-Din Jabbar, a 42-year-old US citizen, is believed to have driven a pick-up truck into a crowd on a busy New Orleans street, before exiting the vehicle and firing a weapon. He was shot dead by police at the scene.

The FBI says an Islamic State (IS) group flag was found inside the vehicle he was driving, while two improvised explosive devices were found nearby.

FBI assistant special agent Alethea Duncan said the agency did not believe Jabbar was "solely responsible" and were investigating the incident as an "act of terrorism".

At least 15 killed, dozens hurt on Bourbon Street in New Orleans as driver intentionally slams truck into crowd

A man intentionally drove a pickup truck into a crowd of revelers on Bourbon Street in New Orleans' French Quarter early on New Year's Day, killing at least 15 people and injuring dozens of others, officials said. A black ISIS flag was flying from the truck's rear bumper, and the attack is being investigated as an act of terrorism, the Federal Bureau of Investigation said.

The man driving the vehicle has been identified as Shamsud-Din Jabbar, 42, a U.S. citizen from Texas, the FBI said.

In televised remarks Wednesday evening, President Biden said the FBI has determined that just hours before the attack, Jabbar "posted videos to social media indicating that he was inspired by ISIS, expressing a desire to kill."

The vehicle was an electric Ford pickup truck that appears to have been rented, the FBI said. Texas Lt. Gov. Dan Patrick said on social media Jabbar rented the truck on Dec. 30, while living in the Houston area, before heading to New Orleans.

Authorities probe possible military link between suspects in New Orleans attack and Trump Tower Cybertruck blast

The potential link was just one thread being pulled by officials Thursday, a day after 15 people were killed when a man plowed a pickup truck flying an ISIS flag through New Year's Day revelers on Bourbon Street in New Orleans.

Authorities are investigating a possible military connection between the New Orleans car-ramming suspect and the person who died after a Tesla Cybertruck exploded outside Las Vegas' Trump International Hotel on New Year's Day, two law enforcement sources familiar with the cases told NBC News.

The potential link was just one thread being pulled by officials Thursday, who were also searching a site in Texas a day after a man drove a pick-up truck flying an ISIS flag into New Orleans' busy Bourbon Street in the early hours of New Year's Day, killing 15 people and injuring at least 30 others.

The FBI is investigating it as a terrorist act. Authorities are still looking into "people of interest," New Orleans Police Department Superintendent Anne Kirkpatrick told NBC News' "TODAY" show Thursday.