🧰 Firefox

The items that name it 25

• Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
  writeupas affected products2026-10-31
• Was I wrong about open models & cyber risks?
  articleas affected products2026-10-30

  exploit found by Epoch AI using GLM 5.3 let a visited website exfiltrate files from the user's computer without further interaction

• Chrome and Firefox Updates Patch Over 200 Vulnerabilities
  articleas classification.technologies2026-10-28
• Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Wallet Secrets
  writeupas classification.technologies2026-10-27
• eMudhra, Brotli, and the Long Tail of a Security Fix
  articleas classification.technologies2026-10-26
• eMudhra CA compromise: eight private keys, and one of them is 4
  articleas classification.technologies2026-10-22
• Your MCU likely escaped the eMudhra intermediate CA compromise
  articleas classification.technologies2026-10-21
• Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
  articleas classification.technologies2026-10-21
• Anthropic Gives Open Source Maintainers a Fast Track to Mythos Vulnerability Findings
  articleas affected products2026-10-15It is written here as Firefox (Mozilla shipped fixes for 271 vulnerabilities identified during an early Mythos Preview evaluation, in April).

  Mozilla shipped fixes for 271 vulnerabilities identified during an early Mythos Preview evaluation, in April

• Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
  articleas classification.technologies2026-10-14
• 16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials
  writeupas classification.technologies2026-10-07
• Gemini 4 Is Here, and Google’s Flagship Tops All Other AI Models on Cybersecurity
  articleas affected products2026-09-30

  271 security holes found by early Claude Mythos, subsequently patched

• Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts
  writeupas classification.technologies2026-09-23
• Socket: Malicious Extensions Drain Axiom Trade and Padre Crypto Sessions
  writeupas classification.technologies2026-09-12
• Socket: "JeetBot" Twitch Extension Steals 31,000 Users' OAuth Tokens
  writeupas classification.technologies2026-09-12
• Common C/C++ Vulnerabilities: A Practical Guide to Prevention | Blog | Endor Labs
  articleas affected products2026-09-11

  browser exploits frequently leverage CWE-416 (use-after-free) bugs for sandbox escapes

• bikini/exploitarium
  repoas affected products2026-09-07It is written here as Firefox (SmartWindow private URL exfil PoC).

  SmartWindow private URL exfil PoC

• Socket: "Offside Wallet Theft Factory"
  writeupas classification.technologies2026-08-19
• Have We Seen an Acceleration in Discoveries?
  articleas affected products2026-08-14It is written here as Firefox: 210 CVEs in 2025, 342 through 2026-08-04, 37 of 342 (11%) AI-marked.

  210 CVEs in 2025, 342 through 2026-08-04, 37 of 342 (11%) AI-marked

• Announcing a Trillion Dollar Security grant for WEBCAT
  articleas classification.technologies2026-08-05
• jscrambler npm Package Compromised in Supply Chain Attack
  writeupas affected products2026-07-11

  profiles.ini, cookies.sqlite, prefs.js targeted

• Socket: Chrome and Firefox VPN Extensions Add Clipboard Stealers via Malicious Updates
  writeupas classification.technologies2026-06-30
• AI-Assisted Vulnerability Discovery
  articleas classification.technologies2026-05-15
• Intelligence Cyber Digest
  threadas affected products2026-05-12It is written here as Firefox (on Windows).

  on Windows

• Android deep link vulnerabilities: how intent filters lead to account takeover | Oversecured Blog
  articleas affected productsIt is written here as Firefox (does not block intent selectors).

  does not block intent selectors