Security Issues With Two Experimental Add-Ons

Important Note: One of the malware results has been verified to be a false positive.  Further details are available here: http://blog.mozilla.org/addons/2010/02/09/update-on-the-amo-security-issue/ Original blog entry follows below. Two add-ons in the … Read more

Mozilla Plugin Check Now Live

A little over a month ago, I talked about a project we had started to inform users when their plugins were out of date. This is a really important project … Read more

A Glimpse Into the Future of Browser Security

As we mentioned earlier we’ve been working for the past few months on turning the Content Security Policy specification into working Firefox code. (You’ll remember that CSP is a framework … Read more

Plugin Updating Project: Follow up

I wrote last week about a new project we’ve started, informing our users when they’re running out of date versions of popular plugins. We focused our initial efforts on the … Read more

Helping users keep plugins updated

Starting with the upcoming releases of Firefox 3.5.3 and Firefox 3.0.14, Mozilla will warn users if their version of the popular Adobe Flash Player plugin is out of date. Old … Read more

URL bar spoofing vulnerability

Issue The URL in the address bar can be spoofed when a new window or tab is opened by a malicious web page. Impact to users If a user visits … Read more