Firefox reduces browser fingerprint uniqueness after large user study
Protections in Firefox 145, measured with nearly 25 million users, cut unique fingerprints; a CCS 2026 paper documents the method.
Stories per day · 30 days
4 RSS
Relatedfirefox16certificate-authority5emudhra4pki4browser3privacy3thunderbird3certificates2chrome2comodo2firefox-esr2glm2google2patch-gap2sandbox-escape2advisory1ai-controls1android1
34 stories, newest first · one card per story
Stories tagged #mozilla
Firefox free VPN drops its 50GB monthly cap until January 31
Signed-in desktop and Android users in supported regions get unlimited in-browser VPN traffic through that date.
Firefox before 159.0.1 affected by vulnerability fixed in 159.0.1
Canada's Cyber Centre urges users to review Mozilla's links and apply updates as they become available.
Firefox Q3 2026 Security and Privacy Newsletter Released
Details faster releases, new privacy protections like Containers and iOS ad blocking, plus LLM-assisted bug detection.
Mozilla plans staggered Firefox fixes to blunt AI patch-gap attacks
Mozilla says it now ships weekly, withholds regression tests, and will stagger sandbox-layer fixes so their patch windows do not overlap.
GLM 5.3 built Firefox exploit chains from public patch gaps
Epoch AI says each successful chain cost about $1,000 and Mozilla fixed the rediscovered bug in Firefox 159.0.
Mozilla advisory AV26-1100 covers Firefox, ESR and Thunderbird flaws
Canada’s Cyber Centre lists builds before Firefox 159, ESR 115.44 and 153.6, and matching Thunderbird versions.
Chrome 156 and Firefox 159 patch more than 200 flaws
CVE-2026-118306 can run arbitrary code outside Chrome's sandbox from a crafted HTML page; no in-the-wild exploitation is mentioned.
Chrome 156 and Firefox 159 patch critical memory-safety flaws
Google shipped 52 fixes, four rated Critical, and Mozilla fixed 167 bugs; both credited AI-assisted bug finding.
Firefox Smart Window adds AI form filling and webpage monitoring
The US and Canada desktop beta sends selected open-tab text to Google’s Gemini 3.1 Flash Lite.
Comodo AAA Services root and S/MIME raised on oss-security
The October 22 post is truncated after Böck says he asked Mozilla what earlier messages meant.
GoDaddy revokes 404,607 SSL certificates after profile mismatch
Revocation took effect October 21, 2026, and sites still serving those certificates can fail browser TLS checks.
Firefox 153 ESR still trusts Comodo AAA, list reply says
Jakub Wilk says his Firefox 153 ESR still trusted the Comodo AAA certificate despite Mozilla bug 1957685.
Firefox will keep security-fix tests private for a week after release
Sec-high and sec-moderate fixes must ship without tests until the Tuesday after a Tuesday release.
Mozilla opens its eMudhra intermediates tracking bug to the public
Alan Coopersmith says restrictions on Mozilla bug 2083449 were removed on October 20.
NSS 3.131.1 ships important fixes tracked as CVE-2026-113470
The oss-security note cites Mozilla advisory MFSA2026-112 but does not describe the flaw or exploitation.
Mozilla alerts Firefox users after eMudhra intermediate compromise
The notice reached the distros list a day before this oss-security forward and points to a Mozilla security post.
Ubuntu removes emSign ECC Root CA - G3 after CA compromise
22.04, 24.04 and 26.04 LTS also refresh ca-certificates to the Mozilla 2.90 authority bundle.
Mozilla blocks eight compromised eMudhra intermediate certificates
OneCRL reached standard Firefox users in under three hours; 158.0.1 and two ESR builds cover the rest.
Mozilla security advisory (AV26-1057)
Canada’s Cyber Centre urges updates for Firefox, Firefox ESR, and Thunderbird flaws fixed in October 2026 releases.
Firefox Enterprise Adds DLP and AI Controls to Block Sensitive Data Leaks
Mozilla launched Firefox Enterprise 158 with self-hosted admin controls, built-in DLP, and restrictions on AI data sharing.
16 Malicious Firefox Extensions Impersonate Crypto Wallets to Steal Seed Phrases and Private Keys
Sixteen malicious Firefox extensions impersonating Rabby and OKX crypto wallets stole seed phrases and private keys, exfiltrating them to attacker-controlled Cloudflare Workers.
100 days later: Microsoft still steers Windows and Copilot users to Edge
Mozilla says Microsoft still steers non-EEA Windows and Copilot users toward Edge, 100 days after its report.
Mozilla shutting down Solo AI website creator
Mozilla will shut down Solo and permanently delete all sites and data on November 30, 2026.