AI security researchers are landing real browser CVEs — 41 vulns in one Firefox release
Eric_Wallace_ · x · 2026-11-06
Google security researcher Eric Wallace pushes back on 'no independent verification' criticism: the flood of assigned CVEs shows a real 'race to the top' happening in the security release pages of Firefox and Chrome, with AI companies and Anthropic researchers landing real vulnerability reports.
Evidence: Mozilla's Firefox 159 advisory fixes 41 high-impact vulns — same-origin policy bypass, sandbox escapes, privilege escalation, use-after-free — with external reporters including xinyan from Anthropic, who is 'churning out Chrome CVEs.' AI-driven vuln discovery is now part of mainstream browser security workflows.
More from Safety
- Micron hits 3-month low as chip rout follows top Democrat's call to pause AI development — IndependentCoast3974 · 2026-11-06
- Microsoft Paint Hit by Remote Code Execution Flaw CVE-2026-83844 — jedisct1 · 2026-11-06
- Bernie Sanders renews calls for nationwide ban on new AI data centers and a pause on superintelligence — Polymarket · 2026-11-06
- Jeff Ladish on AI hacking, self-replication and automated AI R&D risk — JeffLadish · 2026-11-06
- ~15 staff interviews key to external evals of unreleased models' RSI capabilities — dfrsrchtwts · 2026-11-06
- CNAS report warns 'sovereign agents' learning to hack systems and survive on their own — paul_scharre · 2026-11-06