Mozilla plans staggered Firefox fixes to blunt AI patch-gap attacks
Mozilla says it now ships weekly, withholds regression tests, and will stagger sandbox-layer fixes so their patch windows do not overlap.
52
Vendor
Mozilla
- Mentions · 7d8
- Mentions · 30d31
- All mentions52
- First seenAug 11, 2026
- Last mentioned2h ago
Timeline
52 articles · newest firstGLM 5.3 built Firefox exploit chains from public patch gaps
Epoch AI says each successful chain cost about $1,000 and Mozilla fixed the rediscovered bug in Firefox 159.0.
76
Mozilla advisory AV26-1100 covers Firefox, ESR and Thunderbird flaws
Canada’s Cyber Centre lists builds before Firefox 159, ESR 115.44 and 153.6, and matching Thunderbird versions.
42
Chrome 156 and Firefox 159 patch more than 200 flaws
CVE-2026-118306 can run arbitrary code outside Chrome's sandbox from a crafted HTML page; no in-the-wild exploitation is mentioned.
70
Malicious Firefox extensions impersonated Phantom, Jupiter, and Bitget
Socket says the removed listings sent recovery phrases to bonto.io, and Phantom’s package included a multi-chain drainer.
54
Fake Phantom, Jupiter, and Bitget Firefox add-ons stole wallet keys
Socket identified add-on IDs 3092199, 3092666, and 3092059; a live config served a 4,029-byte payload.
54
Chrome 156 and Firefox 159 patch critical memory-safety flaws
Google shipped 52 fixes, four rated Critical, and Mozilla fixed 167 bugs; both credited AI-assisted bug finding.
64
Firefox Smart Window adds AI form filling and webpage monitoring
The US and Canada desktop beta sends selected open-tab text to Google’s Gemini 3.1 Flash Lite.
36
eMudhra exits global TLS market after intermediate CA keys compromised
Chrome is set to drop emSign ECC Root CA – G3 on the morning of October 27; Mozilla has already removed it.
76
eMudhra ends certificate business after weak private keys cracked
Eight intermediate keys were integers below 256, one of them 4; major browsers blocked the certificates within days.
76
Firefox 153 ESR still trusts Comodo AAA, list reply says
Jakub Wilk says his Firefox 153 ESR still trusted the Comodo AAA certificate despite Mozilla bug 1957685.
36
eMudhra intermediate CA keys were single-byte and factorable
Eight April 2025 intermediates, also cross-signed by Sectigo, used P-384 private keys of one byte.
78
Browsers block eMudhra intermediate CAs with recoverable private keys
Eight April 2025 intermediates used near all-zero keys; browsers blocked them between October 17 and October 20.
78
Firefox will keep security-fix tests private for a week after release
Sec-high and sec-moderate fixes must ship without tests until the Tuesday after a Tuesday release.
32
Mozilla, Google and Apple block compromised eMudhra certificates
Eight April 2025 intermediates used private keys smaller than 256; no abuse is evidenced, but many trust stores needed updates.
74
Tech giants block eMudhra certificates tied to 8 compromised keys
Six keys issued website TLS certificates and two were for code signing; fraudulent issuance is unconfirmed.
78
NSS 3.131.1 ships important fixes tracked as CVE-2026-113470
The oss-security note cites Mozilla advisory MFSA2026-112 but does not describe the flaw or exploitation.
46
Eight eMudhra intermediate CA keys compromised; browsers block them
Chrome and Firefox blocked the TLS intermediates within hours of an October 17 report, and no website certificate chaining to them was in Certificate Transparency beforehand.
86
Mozilla blocks eight compromised eMudhra intermediate certificates
OneCRL reached standard Firefox users in under three hours; 158.0.1 and two ESR builds cover the rest.
74
Go 1.27.3 and 1.26.10 block eight CA keys
Rebuilt Go programs reject chains through the keys, with no disable switch, and older unsupported releases get no fix.
76
Mozilla security advisory (AV26-1057)
Canada’s Cyber Centre urges updates for Firefox, Firefox ESR, and Thunderbird flaws fixed in October 2026 releases.
32
Firefox Enterprise Adds DLP and AI Controls to Block Sensitive Data Leaks
Mozilla launched Firefox Enterprise 158 with self-hosted admin controls, built-in DLP, and restrictions on AI data sharing.
42
VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcement
CERT/CC says TLS libraries inconsistently enforce Name Constraints, with three assigned CVEs already fixed.
64
Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases
Sixteen malicious Firefox extensions impersonated crypto wallets and stole recovery phrases via Cloudflare Workers.
62
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
Sixteen malicious Firefox extensions impersonating Rabby and OKX wallets stole recovery phrases via Cloudflare Workers.
64
100 days later: Microsoft still steers Windows and Copilot users to Edge
Mozilla says Microsoft still steers non-EEA Windows and Copilot users toward Edge, 100 days after its report.
32
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
Microsoft says ClickFix attacks now smuggle VBScript through the browser cache to bypass Windows Run limits.
64
Microsoft Warns ClickFix Attacks Use Fake CAPTCHA Lures to Execute Malicious Commands
Microsoft warns a ClickFix campaign uses fake CAPTCHA prompts so Windows users run cached malware that steals browser credentials.
74
Mozilla shutting down Solo AI website creator
Mozilla will shut down Solo and permanently delete all sites and data on November 30, 2026.
30
New Infostealer Can Steal Passwords, Cards, Cookies and Wi-Fi Keys From Windows PCs
K7 Labs analyzed a Python infostealer builder that steals Windows browser secrets, cards, cookies, Discord tokens, and Wi-Fi passwords.
48
Researchers Use New CPU Attack to Steal Linux Root Password Hash From Memory
Researchers' Branch Target Reuse attack leaks Linux root password hashes via stale CPU predictions.
68
Branch Target Reuse: Spectre-v2 Attacks in JIT Engines
VUSec's Branch Target Reuse attack reuses stale JIT branch predictions to speculatively leak memory on Intel CPUs.
64
Chrome, Firefox Updates Patch Over 100 Vulnerabilities
Google and Mozilla patched more than 100 Chrome and Firefox flaws, including critical CVE-2026-102331, with no known exploitation.
68
Spectre bug is back, this time to haunt JIT engines
Researchers disclose Branch Target Reuse, a Spectre v2 JIT attack that can leak Linux root password hashes.
64
Mozilla security advisory (AV26-976)
Canada's Cyber Centre urges updates for Firefox before 157 and three Firefox ESR branches after Mozilla security fixes.
34
Malicious Firefox Extension Disguised as PDF Tool Steals Google Account Sessions
A Firefox PDF add-on fetches post-install instructions that steal Google sessions and can silently reset passwords.
58
Fake Firefox Extension Hijacks Google Accounts Without Stealing Passwords First
A fake Firefox PDF extension steals Google oauth_token cookies and automates account takeover after install.
52
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
AI-assisted bug hunting drives record vulnerability disclosures, with 66,401 CVEs logged in 2026 so far, nearly double last year's pace, straining defenders and open-source maintainers.
50
Mozilla's new Smart Window assistant runs on Mistral's models
Mozilla's Firefox Smart Window beta AI browsing assistant, powered by Mistral's models, launches in France and North America with no conversation storage.
35
Chrome, Firefox Updates Patch 115 Vulnerabilities
Google and Mozilla patch 115 vulnerabilities across Chrome 153 and Firefox 156, including three critical Chrome bugs; no exploitation reported.
55
Related CVEs
by mentions- CVE-2026-111943<1%6.8On most platforms, Go uses the given system root certificates
- Cryptographic issue in the Security Block-lists, Allow-lists, and other State component
- CVE-2026-64507<1%—Linux kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2…
- CVE-2026-64508<1%—Linux kernel: bpf: Support for hardening against JIT spraying
- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-65816<1%10.0Unauthenticated Privilege Elevation Flaw in Microsoft Azure Arc
- CVE-2026-69555<1%10.0Incorrect Authorization in Microsoft Azure Arc Enables Network Privilege Escalation
- CVE-2026-697301%9.8Use-After-Free RCE in Windows DNS Server
- Critical Use-After-Free in Google Chrome Workers Enables Sandbox Escape
- Critical sandbox-escape memory corruption in Google Chrome FileSystem
Appears with
- Firefoxproduct · 38
- Googlevendor · 20
- Microsoftvendor · 15
- Mozillaorganization · 12
- Chromeproduct · 11
- Applevendor · 10
- eMudhravendor · 9
- Firefox ESRproduct · 6
- Windowsproduct · 5
- Oraclevendor · 5
- NSSproduct · 5
- Thunderbirdproduct · 5
- Socketorganization · 5
- Microsoftorganization · 4
- Canadian Centre for Cyber Securityorganization · 4
- Googleorganization · 4
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.