Web·
Mozilla made Google rewrite the JPEG XL decoder in Rust before Firefox would ship it
Firefox turns JPEG XL on by default in version 157. Mozilla refused to ship 100,000 lines of C++, so Google Research wrote the decoder again in Rust.
Company
Mozilla
RSSThe foundation behind Firefox. Security work, AI-assisted bug fixing, and browser releases.
7 articles
First covered Apr 22, 2026, latest Aug 25, 2026
Web·
Agents that start with access to nothing: Cloudflare open-sourced the agent platform it runs internally
Cloudflare open-sourced Cloudflare OS under Apache 2.0 and shipped Kitesurf, WebMCP, and Wallets the same week. Here's which pieces are GA and which are private beta.
Open Source·
65.9% of the web platform tests now pass in Servo, but the Rust engine can't select text
Servo 0.4.0 landed a record 558 commits and fixed layout on real sites. Its own dashboard reads 65.9%, CSS Grid sits at 37.8%, and text selection isn't shipped yet.
AI·
Anthropic's Glasswing logged 10,000 vulnerabilities in a month. Most are still waiting on a patch.
Anthropic says Project Glasswing's first month produced over 10,000 critical-and-high-severity vulns. Verification and patching is the limiting step.
Policy·
The EU called VPNs 'a loophole that needs closing.' Proton's UK signups rose 1,800%.
An EU Parliament briefing and Executive VP Henna Virkkunen both flagged VPN circumvention of age verification. The UK's attempt to solve it backfired into record VPN adoption.
Security·
Microsoft Edge keeps every saved password in cleartext memory. Microsoft calls it 'by design'.
A researcher showed Edge decrypts the entire password vault at launch and leaves it in process memory. Chrome decrypts on demand. Microsoft says it's intentional.
Open Source·
Mozilla fixed 271 Firefox bugs that Claude Mythos found. Its own tests caught 22.
Firefox 150 shipped Monday with 271 security fixes from Anthropic's Project Glasswing. Mozilla CTO Bobby Holley says Mythos matches elite human researchers.