November 28, 2017 By Larry Loeb 2 min read

Cybersecurity education and security awareness have been important components of security for some time, but it’s never been easy to get companies to buy into the effort. One web browser is making an effort to change that.

Cybersecurity Education Takes Center Stage

Mozilla is working to integrate the data breach service Have I Been Pwned into Firefox’s user interface (UI). According to GitHub, Mozilla aims to use the service to alert users about data breaches and provide them with a bit of cybersecurity education.

Have I Been Pwned is a widely respected site run by Australian security researcher Troy Hunt. Its integration into a browser will alert users to data breaches that have led to credential leaks, potentially preventing Firefox users from falling prey to attacks.

Users will be automatically notified when they enter a site that has been recently breached. The browser will also offer a “Learn more” link when alerting users so that they can access additional information about data breaches within the Firefox UI. Those who are interested can then choose to join a service that will notify them about when they might be affected by future breaches, the information on GitHub explained.

Maintaining Data Security

According to Infosecurity Magazine, Hunt expressed some concerns about preserving data security during the process. “What I can say for sure is that no passwords will be involved here — I don’t store them nor do I provide any means of querying them, and I won’t be providing them to anyone else either,” he noted.

Mozilla is sensitive to these privacy issues. The company is working to determine who the custodian of this data will be and how it can offer functionality to users who opt out of subscribing to notifications. As noted by InfoSecurity Magazine, “While the project is still in infancy, the idea is to offer as much utility as possible while respecting the user’s privacy.”

It remains to be seen if Have I Been Pwned will make a big difference for Firefox users, but it’s a step in the right direction for a more secure future.

More from

Unpacking the NIST cybersecurity framework 2.0

4 min read - The NIST cybersecurity framework (CSF) helps organizations improve risk management using common language that focuses on business drivers to enhance cybersecurity.NIST CSF 1.0 was released in February 2014, and version 1.1 in April 2018. In February 2024, NIST released its newest CSF iteration: 2.0. The journey to CSF 2.0 began with a request for information (RFI) in February 2022. Over the next two years, NIST engaged the cybersecurity community through analysis, workshops, comments and draft revision to refine existing standards…

What should Security Operations teams take away from the IBM X-Force 2024 Threat Intelligence Index?

3 min read - The IBM X-Force 2024 Threat Intelligence Index has been released. The headlines are in and among them are the fact that a global identity crisis is emerging. X-Force noted a 71% increase year-to-year in attacks using valid credentials.In this blog post, I’ll explore three cybersecurity recommendations from the Threat Intelligence Index, and define a checklist your Security Operations Center (SOC) should consider as you help your organization manage identity risk.The report identified six action items:Remove identity silosReduce the risk of…

Obtaining security clearance: Hurdles and requirements

3 min read - As security moves closer to the top of the operational priority list for private and public organizations, needing to obtain a security clearance for jobs is more commonplace. Security clearance is a prerequisite for a wide range of roles, especially those related to national security and defense.Obtaining that clearance, however, is far from simple. The process often involves scrutinizing one’s background, financial history and even personal character. Let’s briefly explore some of the hurdles, expectations and requirements of obtaining a…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today