← Back to Feed
Mozilla updates GPG signing key for Firefox releases after exposure
August 11, 2026 · BleepingComputer · Severity: MEDIUM
Mozilla announced it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally exposed on GitHub. Users should verify the new key to ensure the integrity of their software downloads.
Key Takeaways
- Mozilla updated its GPG signing key after accidental exposure on GitHub.
- The key is used to sign Firefox and Thunderbird releases.
- Users should verify the new key to ensure software integrity.