[firefox]

October 27, 2026

• Windows primitives doing the rounds: CVE-2026-40369 is described as an unprivileged arbitrary 12-byte kernel write in nt!ExpGetProcessInformation, reachable from any context that can call NtQuerySystemInformation — including sandboxed Chrome, Edge and Firefox renderers — with PoC and write-up published (@DarkWebInformer). Separately, CVE-2025-24071: extracting a .rar containing a malicious .library-ms file makes Explorer initiate outbound SMB authentication, leaking the NTLM hash with no further interaction ([@DarkWebIn · Vulnerabilities & Exploits

in Brotli's Blast Radius Widens as PHP2Shell Lands on KEV

September 15, 2026

• “Twitch Enhanced Viewer | JeetBot” exposed live Twitch OAuth tokens to operator-controlled proxies. Socket found that version 85.x placed tokens in an auth query parameter for every watched channel except ten hardcoded Russian-language channels, making them available in proxy logs. Store listings showed roughly 31,000 users across Chrome and Firefox; tokens could reach chat, whispers, and account settings. Both add-ons were still listed on September 14, The Hacker News reports. · Cloud, Identity & Supply Chain

in Scope Questions Recast Anthropic’s “Rogue Agent” Incidents

August 21, 2026

• 40 malicious Firefox extensions impersonate OKX, Rabby Wallet and TronLink to steal wallet secrets, part of a wider set of 77 add-ons sharing code and infrastructure in a campaign Socket calls Offside Wallet Theft Factory (The Hacker News). · Supply Chain

in Microsoft's Own Defender Driver Becomes the EDR Killer

July 12, 2026

Exploit Chains, Poisoned Packages, and AI Agents Turned Against Their Owners

Android 17 users face a public browser-to-kernel exploit chain combining Firefox JIT RCE (CVE-2026-10702) with kernel exploits for full device compromise. U-Boot firmware has six critical signature-verification flaws affecting 50+ stable releases and embedded devices worldwide, enabling arbitrary code execution and root-of-trust bypass. AI coding agents are now targets: Ghostcommit hides prompt-injection payloads in PNG images to steal environment secrets, while HalluSquatting weaponizes AI model hallucinations to register fake package names and deliver botnets to trusting developers. The jscrambler npm package was compromised with a Rust infostealer that executes on installation across Windows, macOS, and Linux.