AI agent loops are a form of smart automation that use self-activating prompts to achieve goals, but poorly defined goals can lead to infinite loops and high costs. Mozilla used AI agents with custom …
A documentary short titled 'Code for the People,' directed by Bao Nguyen, explores the past, present, and contested future of the open web, highlighting the threat of closed AI and walled gardens. The…
The Ethereum Foundation is deploying swarms of AI agents to red-team its network infrastructure, uncovering vulnerabilities including a remotely triggered panic in libp2p's gossipsub. The AI agents, o…
A power outage struck the RAISE Summit during a keynote by Mistral CEO Arthur Mensch and Mozilla president Mark Surman, who were arguing for open-source AI reliability. The pair continued their firesi…
Tessa Kriesel, a developer tools marketer, increased Tabstack signups by 71% in her first 90 days by treating go-to-market as an engineering problem, building a real product on the API before starting…
Security researchers at NebuSec have achieved the first full-chain remote code execution from a browser to the kernel on Android 17, exploiting Firefox 151 to gain root access. The exploit, dubbed Cyb…
GitHub, Mozilla, Hugging Face, and other LLM-gen-AI companies oppose updates to the California Artificial Intelligence Transparency Act (SB 1000), arguing that provisions requiring revocation of licen…
A FIRST blog forecast reveals CVE volumes are tracking 46% above original projections, driven by AI-assisted discovery and structural reporting changes, with an estimated 66,000 vulnerabilities expect…
Mozilla's 0Din security team demonstrated a new attack that exploits Claude Code, Anthropic's AI coding assistant, by embedding malicious prompts in Git repositories. When developers open a poisoned r…
A ZDNET editor tested the AI features in Chrome, Edge, and Firefox to determine which browser offers the best AI experience. The editor found that each browser brings different AI capabilities, but ul…
Mozilla President calls for an open-source 'rebel alliance' to counter Big Tech's control over AI, highlighting moves by Canada, the EU, and other nations to prioritize open-source AI infrastructure. …
Mozilla's Zero Day Investigative Network (0DIN) warned that a malicious GitHub repository can compromise a developer's machine via indirect prompt injection targeting AI coding agents like Claude Code…
Security researchers at Mozilla's 0DIN platform demonstrated that a compromised GitHub repository can infect a developer's machine when an AI coding tool like Claude Code executes its setup, with mali…
Mozilla's 0DIN researchers demonstrated a proof-of-concept exploit that uses a clean GitHub repository to trick Anthropic's Claude Code agent into executing a reverse shell, compromising developer sys…
Researchers at Mozilla's Zero Day Investigative Network (0DIN) demonstrated a novel attack where AI coding agents like Claude Code can be tricked into executing malware by cloning a clean GitHub repos…
OpenAI launched Patch the Planet, a cybersecurity initiative using its GPT-5.5-Cyber model to find and fix vulnerabilities in open source software. In its first week, Trail of Bits filed 64 pull reque…
A user on Privacy Guides asks whether using a user agent switcher addon is a good idea to avoid mobile app installation prompts. The addon spoofs the user agent at the JS level and bypasses Cloudflare…
A malicious package named foxhole-lz4 bypassed seven AI-powered security gates on the creats.io registry, exfiltrating credentials for 96 hours before being resolved by treaty. The incident, which aff…
The National Academies of Sciences, Engineering, and Medicine published a report on AI for cybersecurity that cites Anthropic's Mythos model as capable of finding 83.1% of vulnerabilities in CyberGym,…
Simon Willison created a GitHub repository that uses AI-generated scripts and GitHub Actions to build a 66MB SQLite database from Mozilla's browser compatibility data, hosted with open CORS headers fo…