Tor

Tor Browser 14.0.8 for Windows: Why You Need to Update Immediately

Tor just dropped an emergency browser update for Windows users—version 14.0.8—and if you’re still running 14.0.7, you're exposed. This release patches critical Firefox security flaws, updates core components, and signals just how fast things can break if you're not staying current.

Sam Bent

Mar 27, 2025 — 1 min read

update tor browser

If you're a Windows user running the Tor Browser, stop what you're doing and check your version. Tor 14.0.8 is out now, and it’s not your average point release it’s an emergency patch addressing urgent security vulnerabilities in the Firefox engine. This isn’t optional. If you’re on Windows, updating immediately isn't just a recommendation it's a necessity.

This emergency release brings over essential security fixes from Firefox 128.8.1 ESR, Mozilla's extended support version aimed at stability and long-term security. While Tor’s customizations add privacy layers, they still rely on Firefox’s codebase. When Firefox patches a hole, especially one that compromises user security, Tor has to act fast and that's exactly what this release does.

Beyond the critical fixes, Tor 14.0.8 also backports new UX for its User Survey feature, aiming to streamline how users provide feedback. This could pave the way for more agile responses to user pain points and faster iteration on browser improvements.

But the core of this update is under the hood. The build system has been cleaned up and hardened:

Obsolete architecture and locale migration support were stripped out legacy update code gone.
OpenSSL hash file formats were revised to align with upstream changes.
The anonymous bridge system Snowflake was bumped to version 2.11.0.
Lyrebird support was upgraded to version 0.6.0, improving pluggable transport capabilities.

And in a nod to security trust chains, a new Firefox/GeckoView signer clairehurst has been added to the list of verified contributors.

The bottom line? If you’re using Tor Browser on Windows, update now. The 14.0.7 version leaves you vulnerable, and threat actors don’t wait for users to catch up.

➪ Download Tor Browser 14.0.8 here
➪ Review the full changelog

The Malware Masquerade: How Fake Windows Downloads Are Hijacking Your Digital Life

Storm-0249 has launched a new attack wave using fake Windows 11 Pro download sites to spread the advanced Latrodectus malware. Learn how this scam works, why it’s effective, and the practical steps you can take to protect yourself and others.

Dark Web Dumps Gemini and Binance User Data: What’s Real, What’s Hype, and What You Should Watch

Over 230,000 user records tied to Gemini and Binance are now for sale on dark web forums, raising serious questions about the scope and source of the leaks. While Binance denies a breach and blames phishing, the scale of exposed personal data suggests something deeper is at play.

2.3 Million Bank Cards Leaked, and That’s Just the Tip of the Iceberg

Kaspersky’s latest threat report reveals a massive surge in infostealer malware, with over 2.3 million bank cards exposed on the dark web and up to 25 million devices compromised in 2024 alone.

From Thai Villa to Tipton Sheds: How a £4M Xanax Operation Got Burned

A dark web pill press network making millions in crypto was brought down after basic OPSEC failures and a corporate tip-off. The bust highlights the gap between decentralised ambition and sloppy execution.

Read more

The Malware Masquerade: How Fake Windows Downloads Are Hijacking Your Digital Life

Dark Web Dumps Gemini and Binance User Data: What’s Real, What’s Hype, and What You Should Watch

2.3 Million Bank Cards Leaked, and That’s Just the Tip of the Iceberg

From Thai Villa to Tipton Sheds: How a £4M Xanax Operation Got Burned