Live threats
HighMicrosoft FORGE Lab Discovers 33 New Linux Kernel CVEs, Including 8 Privilege‑Escalation Flaws BreachMaersk Confirms Legacy System Breach; Hackers Claim 100 GB Data Theft and $5 M Ransom Demand Rule changeTreasury publishes FY27 Social Impact Partnerships to Pay for Results Act Notice of Funding Opportunity DeadlineNARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests CriticalSGLang Remote Code Execution Exploit Compromises NEAR AI Inference Server, Exposes Data of ~100 Users and 18 Agents BreachYouHack Forum Breach Exposes 7.2 Million Email‑Password Pairs from 2013 Compromise FineFTC and five states sue Hims & Hers for deceptive privacy, health data sharing and billing practices CriticalActive Outlook Zero‑Day (CVE‑2026‑124194) Enables NTLM Credential Theft – Patched in Microsoft November 2026 Update
Updated 07:51 UTC All intelligence →
Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
EN
JoinJoin
BREACH WATCH BRIEF Critical 🐛 Vulnerability

Multiple Critical Vulnerabilities in Mozilla Firefox and ESR Enable Arbitrary Code Execution

CIS advisory 2026‑131 lists 70+ CVEs in Firefox and Firefox ESR that could allow sandbox escape and arbitrary code execution. Organizations must patch quickly and tighten vulnerability‑management controls to maintain audit readiness.

ADTP Breach Watch · November 10, 2026 · CIS Advisories
SeverityCritical
Type🐛 Vulnerability
ConfidenceHigh
ReportedNov 10, 2026
Technology & SaaS government agencies large and medium enterprises any organization deploying Firefox or Firefox ESR Vulnerability Exploit Zero-Day Exploit

What happened

CIS disclosed dozens of use‑after‑free and sandbox‑escape bugs across Firefox and Firefox ESR. The most severe flaws could let an attacker run code with the privileges of the logged‑in user, potentially escalating to full system control. No active exploitation has been reported.

Why it matters for trust and compliance

  • These flaws test an organization’s ability to maintain a documented vulnerability‑management process and demonstrate timely patch evidence across frameworks.
  • Provides a concrete test of your vulnerability‑management controls and evidence collection.
  • Maps to multiple framework objectives (e.g., NIST CSF Identify, ISO 27001 A.12.6) through a single remediation activity.

Who is affected

government agencies large and medium enterprises any organization deploying Firefox or Firefox ESR

Recommended actions

  1. Apply Mozilla’s patches for all affected versions immediately after testing.
  2. Formalize a monthly automated patch‑management cadence and record evidence in your Trust Center.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the mapFollow Regulatory Watch
  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL

Get the Breach Digest

The incidents that matter for your vendors and your data, analyzed for practitioners, in one email.