We are excited to get this much attention with our CTF. Unfortunately, this means that we will have to close down registration soon. Registration will be closed on Friday or … Read more
This is an update on the prior Mozilla CTF announcement: The registration starts now! As mentioned earlier, the CTF is on January 25th and will go for 24 hours. Everybody … Read more
Several members of the Mozilla Security team will participate in an AMA on reddit this morning. You can find it here!
Announcing the Mozilla CTF hacking competition Per the announcement during Frederik Braun’s presentation today, Mozilla will host a CTF event in January, 2012. The Mozilla CTF will take … Read more
On Wednesday 14th December, Mark Goodwin from Mozilla’s Infrastructure Security team will be presenting a guest lecture on web and application security at Sheffield Hallam University. The talk explores how … Read more
We’re committed to security at Mozilla and take every opportunity throughout the development lifecycle to integrate security controls, guidance and verification. One of the items that we’ve found successful thus … Read more
On Thursday, Aug 25, Mozilla will be hosting the OWASP Bay Area chapter meeting. This free event will bring together nearly 100 security experts in the bay area to discuss … Read more
Zack Weinberg did a great blog post explaining the recent changes in Firefox 3.5.11 and 3.6.7 to mitigate cross-site data theft using CSS. This is a mitigation for an issue … Read more
Issue There has been discussion today about a Firefox feature that warns users when a site’s URL is deceptive. When a Firefox user visits a site with a url that … Read more
Mozilla launched its security bounty program in 2004 and while the original mission of protecting users by supporting security research has not changed, the security environment has changed tremendously. In … Read more
Adobe recently released a security advisory for Flash Player, Adobe Reader and Acrobat. The advisory stated a critical vulnerability existed in all versions of Flash prior to and including 10.0.45.2. … Read more
Mozilla was contacted by Evgeny Legerov, the security researcher who discovered the bug referenced in the Secunia report, with sufficient details to reproduce and analyze the issue. The vulnerability was … Read more