Company
Mozilla is a nonprofit-backed software organization best known for the Firefox web browser, and it develops open-source internet technologies and privacy tools.
Mozilla announced Firefox Enterprise on October 12 without a price for its self-hosted management console. A DEV Community review says its AI lockdown already works in free Firefox through the AIControls policy.
Reality
VulnCheck counted Chrome CVEs up 563% and GitHub-issued CVEs up 476% year to date in a May 14, 2026 post. It calls the rise consistent with AI-assisted bug finding, but whether the volume lasts is unknown, so exploitation data still sets patch order.
Reality
Anthropic's OSS Scanner sends maintainers Mythos findings before its researchers review them, with about 6,000 of 29,000-plus candidates triaged. The service is free and opt-in, and reports carry reproduction steps and proposed fixes where available.
Reality
Mozilla launched Firefox Enterprise on October 12, 2026, with a browser management console that customers run on their own infrastructure. Policy, DLP and AI-use controls live on that server, so the customer also deploys, patches and backs it up.
Perspective Coverage
6 publishersReality
Socket found 16 Firefox extensions posing as Rabby and OKX wallets that intercept recovery phrases and private keys during wallet import. Names and IDs rotated behind a screen that still read Rabby Wallet, so only an allowlist of exact extension IDs holds up.
Reality
Mozilla counts six Windows and Copilot behaviors that still override users' browser choice, 100 days after its Over The Edge 2.0 report. By Mozilla's own tests, the EU's Digital Markets Act fixed part of that in Europe and did not reach the newest surfaces.
Reality
Firefox 157 rolls out Mozilla's redesign, trialled for months in Nightly, to everyone on desktop and mobile. Help screenshots and walkthroughs made before this release no longer match what an updated user sees.
Perspective Coverage
3 publishersReality
VUSec disclosed Branch Target Reuse, a Spectre-v2 attack on JIT engines whose Linux exploit leaks memory at 8 bytes a second. It bypassed every enabled mitigation, and the kernel's fix had already shipped in July.
Reality
Intel, AMD and Arm say their IBPB barrier can block Branch Target Reuse, a Spectre v2 variant hitting all three, if JIT software calls it. Each kernel, browser and runtime that rewrites JIT code now has to add that call itself.
Perspective Coverage
3 publishersReality
Firefox's Exa-powered assistant appears only to users who switch it on, a wager that restraint sells where default-on assistants have not.
Perspective Coverage
5 publishersReality
Firefox's AI assistant is out of North America for the first time, and in French. Mistral's announcement says the browser is now powered by its models; Mozilla says it added one option among several.
Perspective Coverage
3 publishersReality
American commercial models refused to analyse some of the malicious code, so the investigators used downloadable Chinese weights instead. The Mozilla usage statistic attached to that episode counts ranks on a single marketplace.
Reality
The add-on shipped to Mozilla's store as a dispatcher and took its instructions afterwards from a page it opened itself, on a domain built to resemble googleusercontent.com.
Reality
The packaged firejail profile allows a Mozilla directory that Firefox stopped using at version 150, so a jail that looks hardened opens a fresh empty browser every launch, ad blocker included in the loss.
Reality
The September 16 partnership gives Firefox's beta assistant retrieval with sources, tab grouping and history previews, and each request only sees the tabs and history you grant it. Beta coverage is the US, Canada and France.
Reality
The year's CVE tally has reached 66,401, close to double where it stood last September, and Microsoft alone patched 974 in a single month. Jerry Gamblin, who keeps the count, says more known bugs is mostly the system working.
Reality
A new local-only vault delegates all encryption to SOPS and age, then adds an MCP server so an assistant can act on a secret without receiving it. Adoption costs three artifacts on every machine.
Reality
Mozilla put up the first $5 million and Hypertec added $1 million for first-year Canadian deployments on its own hardware. The published contracts are the part that would let anyone swap the pieces.
Reality
Chrome 153 started a two-week milestone cadence, which leaves the enterprise Extended Stable channel on its old eight-week calendar carrying twice as much change per jump. Google wants most admins on Stable anyway.
Perspective Coverage
4 publishersReality
A developer who exposed createAppPair to Gemini lost the integration to a library bump. The same post argues Android Halo ships about a year before anything exists to check its neutrality promise against.
Reality
Product · September 10, 2026 · Confirmed2 publishers
Security · August 25, 2026 · Confirmed2 publishers
Invest · August 20, 2026 · Confirmed2 publishers
Product · August 16, 2026 · One report1 publisher