Mozilla established a new 501(c)(3) nonprofit called Mozilla.org to steward the long-term success of the Mozilla Project, unifying its various entities under a strategic endowment to advance the Mozil…
Mozilla distinguished engineer Brian Grinstead and his team used an agentic bug-finding pipeline powered by Anthropic's Claude Mythos model to discover a 15-year-old bug in Firefox, contributing to a …
FIRST.org revised its 2026 CVE forecast to approximately 66,000, a 46.3% increase from its February estimate, driven primarily by AI-assisted vulnerability discovery. Anthropic's Mythos Preview, part …
A security researcher discovered a prompt injection vulnerability in Firefox's AI chatbot integration in October 2025, allowing attackers to steal personal information such as emails via malicious pag…
Mozilla released the beta version of Smart Window for Firefox, an AI assistant that prioritizes user privacy by not storing chat transcripts, using conversations for training, or selling data. The com…
A vulnerability in Firefox's AI chatbot integration could allow malicious websites to inject hidden instructions into AI prompts and extract data from connected services such as email accounts. Mozill…
Mozilla launched an AI tab grouping feature in Firefox in early 2025 that suggests group titles and tabs to add, running entirely locally on the user's device using a small T5-based model fine-tuned o…
Mozilla's Firefox now includes on-device AI features such as local translation, PDF alt text generation, and sidebar chatbot integration, prioritizing privacy by avoiding cloud processing. The author …
Mozilla released the tabstack CLI, a single Go binary that wraps the Tabstack AI API to turn any URL into clean Markdown or schema-shaped JSON, run natural-language browser automation, and answer rese…
Insinuator.net disclosed a vulnerability in Firefox's AI sidebar that allows prompt injection to exfiltrate user email addresses. The browser sends page titles and selected content to third-party chat…
Mozilla CTO Raffi Krikorian argues that the U.S. government's shutdown of Anthropic's Fable and Mythos AI models via export controls was reckless and counterproductive, as it fails to enhance safety w…
Mozilla has redesigned Firefox's settings interface to make customization options easier to find and manage. The update features a cleaner layout, improved navigation, and new category pages, replacin…
Mozilla released Firefox 152 with tab groups on Android, redesigned settings, and a blocked tracker widget, while unveiling a public roadmap for future features including customizable keyboard shortcu…
Mozilla launched the MDN MCP Server after testing Claude Code on Firefox 151 features revealed the AI confidently gave incorrect browser compatibility information, including falsely claiming Firefox d…
Stack Overflow launched Stack Overflow for Agents, an API-first knowledge exchange for AI coding agents to share verified answers, debugging trails, and design patterns, aiming to close the Ephemeral …
Mozilla released an experimental MCP server for MDN Web Docs, enabling AI tools and IDEs to access up-to-date documentation and browser compatibility data. The server addresses the problem of AI model…
The Forum of Incident Response and Security Teams (FIRST) released its 2026 Mid-Year Vulnerability Forecast, revealing actual CVE disclosures are running 46.3% above projections from four months ago, …
Anthropic researchers found that its Claude Mythos Preview model autonomously built working code-execution exploits for 8 of 18 recent Firefox security patches and 8 full Windows kernel exploit chains…
Recent cyber attacks leveraging AI have highlighted a widening dual-use gap, where AI models enhance both defensive and offensive capabilities asymmetrically. The gap means small security failures now…
Recent cyber attacks aided by AI highlight a widening 'dual-use gap' where AI models create more upside for defenders but even more downside for attackers, increasing the blast radius of mistakes. The…