The images in this article were generated with artificial intelligence. How we publish
Firefox 149 comes with new ideas for users concerned about privacy and, at the same time, practical improvements for daily navigation. The most striking novelty is a VPN tool directly integrated into the browser that offers up to 50 GB of monthly traffic to those who log in with a Mozilla account. Unlike the commercial product of the foundation, which covers all the traffic of the equipment, this function acts as a safe proxy that only links the traffic generated by the Firefox tabs, an important difference in choosing between time protection and system-to-system coverage. You can see the official details in the notes to the Mozilla version: Firefox notes 149 and compare the offer with the VPN paid on the product page: Mozilla VPN.
Activating the function is simple: there is a switch on the top right of the browser that allows the service to turn on and off. There is also an option to limit the use of the VPN to a maximum of five specific sites, which is useful if you want to preserve the 50 GB for specific moments, for example when you connect to public Wi-Fi networks or when you visit services where you prefer to hide your location. Mozilla has published help instructions on the use of the proxy integrated into its technical support: how to activate integrated VPN.

It is important to understand what type of data Mozilla handles with this function. The company indicates that it will collect minimum technical information necessary to maintain the functional service and study use patterns: for example, if a connection was successful or failure and large daily consumption aggregates. This does not amount to recording the content of the pages visited, but it does mean that the status and volume of the connections for service maintenance are monitored. The server that links the connections is located in the United States and its selection prioritizes location and performance, which can have implications in latency and in the legal framework under which these teams operate. To understand how Mozilla manages the data together, its privacy policy offers additional context: Mozilla privacy policy.
Implementation also includes practical care: some essential sites and services are excluded from the proxy tunnel to avoid problems with early session or with the reconnection of the VPN itself. In addition, the browser will warn from within the interface when you approach the monthly traffic limit, so you don't get surprises in the middle of the navigation session.
Beyond the VPN, Firefox 149 incorporates other improvements designed for productivity and safety. The Split View function comes in, which allows you to place side-by-side tabs inside the same browser window, a solution that already has other browsers and that Mozilla proposes as useful to compare texts, plan travel, take notes or make administrative efforts without constantly changing the window. Mozilla explains cases of use and how it helps organize the work on her blog: Split View on Firefox.
In terms of active security, Firefox now automatically blocks requests for notifications and revokes permissions from sites that have been identified as malicious by its SafeBrowsing protection system. This reduces friction and, above all, the risk of compromised sites maintaining persistent permissions to show intrusive content or perform abusive behaviors.
The update also closes a significant amount of vulnerabilities: Mozilla fixes 46 security problems, more than half with high-gravity rating. These include use-after-free, off-limits errors, JIT engine problems and possible vulnerabilities that could allow you to escape from the browser sandbox. The complete list and technical details are available in the official security notice: MFSA security notice. Keeping the browser up-to-date is key: many of these vulnerabilities can be exploited on the web and their parking reduces real risks to any user.

For now, the deployment of the integrated NPV will be undertaken gradually in the United States, the United Kingdom, Germany and France; Mozilla has not set a timetable for its expansion to other territories. This means that, if you live outside those regions, you may not yet see the option in your Firefox installation.
For whom does this new integrated VPN make sense? It is a good option for those looking for an additional layer of protection when browsing from the browser itself - for example on public networks or when consulting sensitive services - without the cost and complexity of a payment VPN covering the entire system. However, it should not be seen as an absolute replacement of a complete VPN if your objective is to protect all device connections or access services with wide geo-restrictions. In addition, the limitation of 50 GB per month and the location of the servers in the US. UU are factors to consider for those who prioritize total anonymity or lower court exposure.
In short, Firefox 149 strengthens Mozilla's bet to integrate privacy-oriented tools into your browser, without losing sight of usability. It is a comfortable alternative to protect navigation in specific contexts and at the same time brings productivity improvements and safety patches that justify immediate updating. If you want to deepen each technical aspect or set up the new VPN, the help pages and notes of the Mozilla version are the best starting point: version notes and integrated VPN support.
Related
More news on the same subject.

Four Plex2Shell CVE allows remote execution and mining and proxy backdoor deployment
In recent days, an increase in attacks has been confirmed that take advantage of a chain of failures in Plex Media Server - nicknamed "Plex2Shell" by researchers - to run code r...

GhostAction Expands Attack: phishing to steal credentials and persistence in VS Code
A group behind the GhostAction campaign - already known for infiltrating GitHub Actions workflows into open source projects - has expanded its arsenal: in addition to installing...

ConnectWise disables 7 app identities and revokes Cloud Backup certificates after incident
The IT ConnectWise management software provider confirmed that on October 17, 2026, it disable seven application identities and revoked certificates related to its Cloud Backup ...

Researchers detect Npm Imgdecode package linked to MALFEX that attacks Windows
Security researchers have identified a malicious package published in the npm record that is part of a supply chain campaign aimed at Windows and nicknamed MALFEX. The package, ...

OpenBSD 7.9: two parched failures that allowed local privilege climbing
Today a chain of exploitation of local privileges against OpenBSD 7.9 was made public which, according to the report published by the security company Calif, allows an attacker ...

OpenAI reveals unaligned IA incidents; a GPT-5.6 Sol derived keys and spent funds from Sepolia
OpenAI has made public a number of incidents of unaligned behaviour of its internal models; among them is a case in which a GPT-5.6 family research model Sol derived private key...

Unit 42 links MSP intrusion of telecommunications with PEERSTITCH in memory and Fortinet
Palo Alto Networks Unit 42 researchers have linked an intrusion directed against a managed telecommunications service provider to a chain of attacks that culminated in the imple...