Epoch reports AI-generated Firefox patch-gap exploits

A controlled test of the patch gap

Epoch AI published its Firefox experiments on October 29. In an offline environment, GLM 5.3 used information available at each historical release to develop attacks against six versions, allowing a test webpage to read and transmit a local file. These were controlled experiments, not reports of attacks on ordinary Firefox users. [1]

The attacks also depended on an unpublished vulnerability. Epoch disclosed its findings to Mozilla, which patched that flaw in Firefox 159.0 on October 27. The researchers had not confirmed whether the attack still succeeded after that patch and did not achieve an equivalent Chrome exploit. The report's public release date does not date the earlier private discoveries. [1]