Mozilla

eMudhra security blunder left trusted CA signing keys exposed to anyone

eMudhra security blunder left trusted CA signing keys exposed to anyone 2026-10-21 at 17:11 By Sinisa Markovic Eight intermediate certificates issued by Indian certificate authority eMudhra were secured with private keys so weak that anyone could recover them from the public certificates in under a second. On its website, the company highlights that it has […]

eMudhra security blunder left trusted CA signing keys exposed to anyone Read More »

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise 2026-10-14 at 10:38 By Ionut Arghire Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise Read More »

Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser

Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser 2026-10-13 at 14:21 By Anamarija Pogorelec Mozilla’s Firefox Enterprise is a paid platform that lets organizations control how sensitive data is shared, check device security, and manage employee access to web applications. The platform pairs the browser with a management dashboard hosted on an […]

Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser Read More »

October 2026 Patch Tuesday forecast: Time for an Office cleanup

October 2026 Patch Tuesday forecast: Time for an Office cleanup 2026-10-09 at 09:32 By Help Net Security September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs […]

October 2026 Patch Tuesday forecast: Time for an Office cleanup Read More »

September 2026 Patch Tuesday forecast: All we need is more time

September 2026 Patch Tuesday forecast: All we need is more time 2026-09-04 at 09:00 By Help Net Security The Patch Apocalypse is continuing unabated. We are seeing record numbers of patches being released and reported CVEs continue to grow as well. August 2026 Patch Tuesday was the second biggest in history with 398 resolved CVEs: […]

September 2026 Patch Tuesday forecast: All we need is more time Read More »

Chrome and Firefox Updates Patch Dozens of Vulnerabilities

Chrome and Firefox Updates Patch Dozens of Vulnerabilities 2026-09-02 at 12:12 By Ionut Arghire The browser refreshes fix multiple use-after-free, sandbox escape, and privilege escalation bugs. The post Chrome and Firefox Updates Patch Dozens of Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome and Firefox Updates Patch Dozens of Vulnerabilities Read More »

Mozilla Issues New Firefox GPG Key Following Exposure

Mozilla Issues New Firefox GPG Key Following Exposure 2026-08-11 at 09:16 By Eduard Kovacs The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it. The post Mozilla Issues New Firefox GPG Key Following Exposure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Mozilla Issues New Firefox GPG Key Following Exposure Read More »

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse? 2026-08-07 at 09:00 By Help Net Security July 2026 Patch Tuesday was record-setting in so many ways. The sheer volume of security patches for almost every product in the Microsoft portfolio was the highest ever and, of course, well over 600 CVEs […]

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse? Read More »

Photos: Black Hat USA 2026, part two

Photos: Black Hat USA 2026, part two 2026-08-06 at 20:50 By Help Net Security Round two from Black Hat USA 2026. This set covers the parts of the show floor that did not make the first gallery. Scroll through below. Featured vendors: BlackCloak, Teleport, GitGuardian, Oak, Hexnode, Picus Security, Featured speaker: Kate Silverstein (Mozilla) discussing […]

Photos: Black Hat USA 2026, part two Read More »

Nearly half of open-source AI projects never reach production

Nearly half of open-source AI projects never reach production 2026-07-20 at 07:00 By Anamarija Pogorelec Open models are moving into production across more organizations, and the work of securing those deployments increasingly extends beyond the model weights. Mozilla’s The State of Open Source AI 2026 identifies deployment, governance and operational tooling as persistent obstacles as […]

Nearly half of open-source AI projects never reach production Read More »

Mozilla warns of indirect prompt injection risk in AI coding agents

Mozilla warns of indirect prompt injection risk in AI coding agents 2026-06-29 at 13:48 By Zeljka Zorz A malicious GitHub repository can silently compromise a developer’s machine without containing a single line of malicious code, security researchers at Mozilla’s Zero Day Investigative Network (0DIN) warned. The attack The proof-of-concept attack targets AI-powered coding agents such […]

Mozilla warns of indirect prompt injection risk in AI coding agents Read More »

June 2026 Patch Tuesday forecast: Where are the CVEs?

June 2026 Patch Tuesday forecast: Where are the CVEs? 2026-06-05 at 10:16 By Help Net Security My forecast from last month was only partly right. After the Anthropic Mythos announcements and the deluge of newly discovered vulnerabilities from vendors like Mozilla, Microsoft’s updates were standard fare, 65 CVEs reported in Windows 11 and 58 in […]

June 2026 Patch Tuesday forecast: Where are the CVEs? Read More »

What Mozilla learned running an AI security bug hunting pipeline on Firefox

What Mozilla learned running an AI security bug hunting pipeline on Firefox 2026-05-08 at 01:14 By Mirko Zorz Over the past several months, Mozilla ran an agentic harness powered by Claude Mythos Preview across Firefox’s source code, identifying 271 security bugs that were fixed in Firefox 150, with additional fixes shipped in versions 149.0.2 and […]

What Mozilla learned running an AI security bug hunting pipeline on Firefox Read More »

Claude Mythos finds 271 Firefox flaws, Mozilla believes it shifts security toward defenders

Claude Mythos finds 271 Firefox flaws, Mozilla believes it shifts security toward defenders 2026-04-22 at 18:51 By Sinisa Markovic The Mozilla Foundation tested Claude Mythos, an Anthropic AI model that has stirred debate in the cybersecurity community. Before granting access to Mythos, Mozilla scanned Firefox using Opus 4.6, which led to fixes for 22 security-sensitive […]

Claude Mythos finds 271 Firefox flaws, Mozilla believes it shifts security toward defenders Read More »

Thunderbird 150 arrives with encrypted message search and OpenPGP improvements

Thunderbird 150 arrives with encrypted message search and OpenPGP improvements 2026-04-21 at 23:32 By Anamarija Pogorelec Released today, Thunderbird 150.0 brings eight new features, a round of bug fixes, and security patches that cover the web engine underlying the email client. Thunderbird 150.0 runs on Windows 10 or later, macOS 10.15 or later, and Linux […]

Thunderbird 150 arrives with encrypted message search and OpenPGP improvements Read More »

Mozilla challenges enterprise AI providers with Thunderbolt, open-source AI client under your control

Mozilla challenges enterprise AI providers with Thunderbolt, open-source AI client under your control 2026-04-17 at 14:32 By Sinisa Markovic For organizations that want to keep company data within their own systems and have more control over how AI is deployed, Mozilla is offering an alternative to externally hosted AI services with Thunderbolt, an open-source AI […]

Mozilla challenges enterprise AI providers with Thunderbolt, open-source AI client under your control Read More »

April 2026 Patch Tuesday forecast: Spring-cleaning of a preview

April 2026 Patch Tuesday forecast: Spring-cleaning of a preview 2026-04-10 at 10:37 By Help Net Security I just blinked and the first quarter of the year is GONE. Where does the time go? I looked back at my article from last month where I touched on the use of AI and some of the vulnerabilities […]

April 2026 Patch Tuesday forecast: Spring-cleaning of a preview Read More »

March 2026 Patch Tuesday forecast: Is AI security an oxymoron?

March 2026 Patch Tuesday forecast: Is AI security an oxymoron? 2026-03-06 at 10:47 By Help Net Security Developers and analysts are using more AI tools to produce code and to test both the performance and security of the finished products. They are also embedding AI functionality in their products directly. But just how secure are […]

March 2026 Patch Tuesday forecast: Is AI security an oxymoron? Read More »

February 2026 Patch Tuesday forecast: Lots of OOB love this month

February 2026 Patch Tuesday forecast: Lots of OOB love this month 2026-02-06 at 09:54 By Help Net Security Valentine’s Day is just around the corner and Microsoft has been giving us a lot of love with a non-stop supply of patches starting with January 2026 Patch Tuesday. The January releases addressed 92 vulnerabilities in Windows […]

February 2026 Patch Tuesday forecast: Lots of OOB love this month Read More »

January 2026 Patch Tuesday forecast: And so it continues

January 2026 Patch Tuesday forecast: And so it continues 2026-01-09 at 11:26 By Help Net Security Welcome to a new year of my Patch Tuesday forecast blog where I provide a summary of Microsoft and other vendor’s security patch activity (and reported issues) for the month, talk about some of the latest trends, processes, and […]

January 2026 Patch Tuesday forecast: And so it continues Read More »

Scroll to Top