Mozilla launched the Come Back to Firefox campaign, leveraging nostalgic internet memes to promote user privacy and challenge Chrome market dominance.
Related Posts:
The post Come Back to Firefox Campaign Champions Web Privacy appeared first on Daily CyberSecurity.
Mozilla blocked eight keys in the eMudhra certificate compromise via OneCRL in under three hours, then shipped Firefox 158.0.1 and NSS 3.131.1.
Related Posts:
The post Mozilla Blocks Eight Compromised eMudhra Certificates in Under Three Hours appeared first on Daily CyberSecurity.
Mozilla released Firefox Enterprise 158.0 on October 13, 2026, introducing its first dedicated enterprise browser with built-in data loss prevention and AI-use controls.
The browser combines Firefox with a self-hosted Admin Console, giving security teams central control over browsing, web access, and how employees share company data. According to Mozilla’s Firefox Enterprise release notes, organizations must deploy the console on their own infrastructure.
Supporting services, including browser updates, Sync, telemetry, and crash collection, also run within the organization’s environment. This setup keeps management data under company control rather than relying on an external management service.
The main addition is DLP, which lets administrators block or warn about pasting, file uploads, downloads, and printing on selected websites.
Teams can display custom messages explaining restrictions. For example, they can block employees from pasting company information into unapproved AI tools while keeping approved services available.
Built-in checks run locally in the browser, so content doesn’t travel over the network for inspection. Organizations using a third-party DLP agent through Firefox’s Content Analysis interface retain that setup.
Firefox Enterprise turns off its built-in DLP and hands inspection to the existing agent. Warnings and blocks appear in the Admin Console, though administrators can turn off that logging.
The focus on browser data controls comes as AI tools create new exposure risks. Cyber Security News previously covered the BioShocking AI browser attack, where researchers manipulated browsing context to make AI agents expose sensitive information. Firefox’s release notes describe controls over data movement, not a specific fix for that attack.
Employees must sign in through the company’s single sign-on provider before browsing. Firefox Enterprise supports OpenID Connect and follows the provider’s multi-factor authentication requirements.
Administrators can also require device security conditions, including disk encryption and running endpoint protection, before allowing access. Firefox signs employees out if their device no longer meets those conditions.
Profile encryption is enabled by default. Browsing history, form data, saved logins, and TLS session tokens are encrypted using a key supplied by the Admin Console.
A copied profile folder cannot be decrypted without that key. Optional watermarks can show an employee’s email address and the time on sensitive pages, helping trace shared images without physically preventing screenshots.
The console supports more than 130 enterprise policies, including restrictions on extensions and update controls. These controls address risks highlighted in earlier reporting on AI browser extension vulnerabilities that exposed private sessions and data. Lockdown Mode can disable JavaScript JIT compilation, block service workers, prevent HTTP downgrades, and isolate selected sites.
Security event logging is optional for each event type, with records sent to the organization’s console rather than Mozilla. Teams can integrate with SIEM systems and remotely sign out lost devices. Firefox Enterprise also inherits security fixes from Firefox 158, while access requires a deployed console and an early-access request.
An EDR alert reveals an attack. But can it tell the full story? Discover how to reconstruct the attack timeline.
The post Firefox Enterprise Adds DLP and AI Controls to Block Sensitive Data Leaks appeared first on Cyber Security News.
Socket found 16 malicious Firefox extensions posing as Rabby and OKX. These crypto wallet stealers grabbed seed phrases. Here is what to do.
Related Posts:
The post 16 Fake Rabby and OKX Firefox Extensions Stole Crypto Wallet Recovery Phrases appeared first on Daily CyberSecurity.
16 malicious Firefox extensions that impersonate cryptocurrency wallets to intercept recovery phrases and private keys during wallet imports. Disguised as wallet portals, desktop utilities, and browser tools, the packages attempt to transmit secrets to attacker-controlled Cloudflare Workers. Mozilla had unpublished the extensions by October 5, 2026, according to Socket’s October 7 report. Fifteen packages contain […]
The post 16 Malicious Firefox Extensions Impersonate Crypto Wallets to Steal Seed Phrases and Private Keys appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Firefox redesign compact mode returns with a modern look, a new theme picker, and one switch to disable all generative AI tools.
Related Posts:
The post Firefox Redesign Compact Mode Returns With AI Off Switch appeared first on Daily CyberSecurity.
That’s a lot. No, it’s an extraordinary number:
Since February, the Firefox team has been working around the clock using frontier AI models to find and fix latent security vulnerabilities in the browser. We wrote previously about our collaboration with Anthropic to scan Firefox with Opus 4.6, which led to fixes for 22 security-sensitive bugs in Firefox 148.
As part of our continued collaboration with Anthropic, we had the opportunity to apply an early version of Claude Mythos Preview to Firefox. This week’s release of Firefox 150 includes fixes for 271 vulnerabilities identified during this initial evaluation...
The post Claude Mythos Has Found 271 Zero-Days in Firefox appeared first on Security Boulevard.
Earlier this month, Anthropic said its Mythos Preview model was so good at finding cybersecurity vulnerabilities that the company was limiting its initial release to "a limited group of critical industry partners." Since then, debate has raged over whether the model presages an era of turbocharged AI-aided hacking or if Anthropic is just building hype for what is a relatively normal step up on the ladder of advancing AI capabilities.
Mozilla added some important data to that debate Tuesday, writing in a blog post that early access to Mythos Preview had helped it pre-identify 271 security vulnerabilities in this week's release of Firefox 150. The results were significant enough to get Firefox CTO Bobby Holley to enthuse that, in the never-ending battle between cyberattackers and cyberdefenders, "defenders finally have a chance to win, decisively."
Holley didn't go into detail on the severity of the hundreds of vulnerabilities that Mythos reportedly detected simply by analyzing the unreleased source code of Firefox's latest version. But by way of comparison, he noted that Anthropic's Opus 4.6 model found only 22 security-sensitive bugs when analyzing Firefox 148 last month.
© Getty Images
Entrar