Defending the patch gap against automated attackers

Mozilla is restructuring Firefox's defenses to combat the rising threat of automated patch-gapping, where AI models are used to reverse-engineer security fixes before they are fully deployed to users. The Firefox team plans to implement a structural defense using time-based separation across multiple layers of sandboxing, ensuring that attackers cannot simultaneously exploit related vulnerabilities during the patch gap window. Open article →