Mozilla has released Firefox 136.0.4 to patch a critical security vulnerability that can let attackers escape the web browser's sandbox on Windows systems. Tracked as CVE-2025-2857, this flaw is ...

Then last month, Canadian cybersecurity company eSentire revealed RedCurl's use of spam PDF attachments masquerading as CVs and cover letters in phishing messages to sideload the loader malware using ...

Mozilla hasn’t had the smoothest 2025 so far. The company behind the Firefox web browser recently introduced updates to its Privacy Notes and Terms of Use that ...

On March 14, 2025, a root certificate used to verify signed content and add-ons for Firefox and other Mozilla projects expired (note that Thunderbird does not do content verification, so that app ...