radar.cysentrix
2 reports · 2 sources · tracked since 5d ago

Mozilla updates GPG signing key for Firefox releases after exposure

AI synthesis Mozilla revoked and replaced its GPG signing key for Firefox and Thunderbird releases after the subkey was accidentally exposed in a GitHub repository.

Why this ranks Transparent score: 12
coverage +6 source breadth +4 urgency +0 freshness +2

What changed

Coverage timeline

Every report remains linked to its original publisher.

  1. SecurityWeek First observed

    Mozilla Issues New Firefox GPG Key Following Exposure ↗

    The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it. The post Mozilla Issues New Firefox GPG Key Following Exposure appeared first on SecurityWeek.