Security researchers at NebuSec have achieved the first full-chain remote code execution from a browser to the kernel on Android 17, exploiting Firefox 151 to gain root access. The exploit, dubbed Cyb…
GitHub, Mozilla, Hugging Face, and other LLM-gen-AI companies oppose updates to the California Artificial Intelligence Transparency Act (SB 1000), arguing that provisions requiring revocation of licen…
A FIRST blog forecast reveals CVE volumes are tracking 46% above original projections, driven by AI-assisted discovery and structural reporting changes, with an estimated 66,000 vulnerabilities expect…
Mozilla's 0Din security team demonstrated a new attack that exploits Claude Code, Anthropic's AI coding assistant, by embedding malicious prompts in Git repositories. When developers open a poisoned r…
A ZDNET editor tested the AI features in Chrome, Edge, and Firefox to determine which browser offers the best AI experience. The editor found that each browser brings different AI capabilities, but ul…
Mozilla President calls for an open-source 'rebel alliance' to counter Big Tech's control over AI, highlighting moves by Canada, the EU, and other nations to prioritize open-source AI infrastructure. …
Mozilla's Zero Day Investigative Network (0DIN) warned that a malicious GitHub repository can compromise a developer's machine via indirect prompt injection targeting AI coding agents like Claude Code…
Security researchers at Mozilla's 0DIN platform demonstrated that a compromised GitHub repository can infect a developer's machine when an AI coding tool like Claude Code executes its setup, with mali…
Mozilla's 0DIN researchers demonstrated a proof-of-concept exploit that uses a clean GitHub repository to trick Anthropic's Claude Code agent into executing a reverse shell, compromising developer sys…
Researchers at Mozilla's Zero Day Investigative Network (0DIN) demonstrated a novel attack where AI coding agents like Claude Code can be tricked into executing malware by cloning a clean GitHub repos…
OpenAI launched Patch the Planet, a cybersecurity initiative using its GPT-5.5-Cyber model to find and fix vulnerabilities in open source software. In its first week, Trail of Bits filed 64 pull reque…
A user on Privacy Guides asks whether using a user agent switcher addon is a good idea to avoid mobile app installation prompts. The addon spoofs the user agent at the JS level and bypasses Cloudflare…
A malicious package named foxhole-lz4 bypassed seven AI-powered security gates on the creats.io registry, exfiltrating credentials for 96 hours before being resolved by treaty. The incident, which aff…
The National Academies of Sciences, Engineering, and Medicine published a report on AI for cybersecurity that cites Anthropic's Mythos model as capable of finding 83.1% of vulnerabilities in CyberGym,…
Simon Willison created a GitHub repository that uses AI-generated scripts and GitHub Actions to build a 66MB SQLite database from Mozilla's browser compatibility data, hosted with open CORS headers fo…
Mozilla established a new 501(c)(3) nonprofit called Mozilla.org to steward the long-term success of the Mozilla Project, unifying its various entities under a strategic endowment to advance the Mozil…
Mozilla distinguished engineer Brian Grinstead and his team used an agentic bug-finding pipeline powered by Anthropic's Claude Mythos model to discover a 15-year-old bug in Firefox, contributing to a …
FIRST.org revised its 2026 CVE forecast to approximately 66,000, a 46.3% increase from its February estimate, driven primarily by AI-assisted vulnerability discovery. Anthropic's Mythos Preview, part …
A security researcher discovered a prompt injection vulnerability in Firefox's AI chatbot integration in October 2025, allowing attackers to steal personal information such as emails via malicious pag…
Mozilla released the beta version of Smart Window for Firefox, an AI assistant that prioritizes user privacy by not storing chat transcripts, using conversations for training, or selling data. The com…