Firefox

Mozilla has announced a new feature that enables Firefox extension developers to roll back to previously approved versions, allowing them to quickly address critical bugs and issues.

Once the latest extension version is reverted, users will no longer be able to install it. If automatic updates are enabled, the web browser will also automatically revert the extension to the previous version within 24 hours for users who have installed the buggy version.

"If developing a revised version and obtaining a review won't address the issue quickly enough, you can roll back to an earlier version of your extension. Users then update to the rolled back version when their browser next checks for extension updates, which, by default, means within 24 hours," Mozilla says.

Wiz

"To address this issue, you can roll back your extension by republishing a previous version with a new version number and pushing this version to users through the Developer Hub or the Add-on Submission API."

Version rollbacks are now available for any extension with at least two approved versions, enabling developers to roll back to the approved version released before the current one for versions distributed on addons.mozilla.org. However, if they're self-distributed, Firefox extension developers can revert to any approved version.

To roll back to a previously approved version via the Developer Hub, developers must use the "Rollback to a previous version" option, located next to "Upload a New Version" on the Status & Versions page.

In June, Mozilla introduced another security feature for its add-on portal to block malicious extensions that drain users' cryptocurrency wallets.

Andreas Wagner, the head of the addons.mozilla.org (AMO) review and content security team, said at the time that Mozilla had discovered and removed hundreds of such extensions over the last few years, including many scam crypto wallets.

Since then, two malicious campaigns have flooded Mozilla's official Firefox add-ons store in July and August with almost 200 extensions impersonating popular cryptocurrency wallets, including Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, Keplr, and MyMonero.

Break down IAM silos like Bitpanda, KnowBe4, and PathAI

Broken IAM isn't just an IT problem - the impact ripples across your whole business.

This practical guide covers why traditional IAM practices fail to keep up with modern demands, examples of what "good" IAM looks like, and a simple checklist for building a scalable strategy.

Related Articles:

GhostPoster attacks hide malicious JavaScript in Firefox addon logos

Mozilla Firefox gets new anti-fingerprinting defenses

Zoom Stealer browser extensions harvest corporate meeting intelligence

Trust Wallet says 2,596 wallets drained in $7 million crypto theft attack

ShadyPanda browser extensions amass 4.3M installs in malicious campaign