CSS text-box-trim crops a headline's box to the font's cap height and baseline, replacing negative margins like -0.18em tuned by eye in devtools. The browser takes the numbers from the font file, so swapping the typeface or raising line-height no longer means retuning a margin.
Reality
- Evidence50
- Adoption60
- Hype gap+10
- Incentives
- Insufficient
- Confidence55
PNG-8 at 124 colors encoded a red-text test poster in 48,481 bytes at an edge error of 0.13 Delta E, smaller and cleaner than every JPEG export. For flat graphics like this one, an export tool that converts everything to JPEG ships bigger files with dirtier red text.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+5
- Incentives55
- Confidence60
Firefox 157 rolls out Mozilla's redesign, trialled for months in Nightly, to everyone on desktop and mobile. Help screenshots and walkthroughs made before this release no longer match what an updated user sees.
Publishers:blog.mozilla.org · engadget.com · phoronix.com Perspective Coverage
3 publishers
- Builder
- Builder 30%
- Operator
- Operator 63%
- Investor
- Investor 7%
Reality
- Evidence66
- Adoption55
- Hype gap+15
- Incentives60
- Confidence72
VUSec disclosed Branch Target Reuse, a Spectre-v2 attack on JIT engines whose Linux exploit leaks memory at 8 bytes a second. It bypassed every enabled mitigation, and the kernel's fix had already shipped in July.
Publishers:phoronix.com · vusec.net Reality
- Evidence70
- Adoption55
- Hype gap+20
- Incentives40
- Confidence68
Chromium 149 canvas JPEGs grew 2.25x from quality 0.80 to 0.99 while red-text edge error fell only from 8.11 to 6.35, one developer measured. Firefox drops chroma subsampling at a lower setting, so the reviewer's browser decides whether the fringe shows.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap0
- Incentives
- Insufficient
- Confidence55
Intel, AMD and Arm say their IBPB barrier can block Branch Target Reuse, a Spectre v2 variant hitting all three, if JIT software calls it. Each kernel, browser and runtime that rewrites JIT code now has to add that call itself.
Perspective Coverage
3 publishers
- Builder
- Builder 42%
- Operator
- Operator 51%
- Investor
- Investor 7%
Reality
- Evidence72
- Adoption40
- Hype gap+15
- Incentives30
- Confidence70
Firefox's Exa-powered assistant appears only to users who switch it on, a wager that restraint sells where default-on assistants have not.
Perspective Coverage
5 publishers
- Builder
- Builder 28%
- Operator
- Operator 54%
- Investor
- Investor 18%
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap+20
- Incentives55
- Confidence58
Firefox's AI assistant is out of North America for the first time, and in French. Mistral's announcement says the browser is now powered by its models; Mozilla says it added one option among several.
Perspective Coverage
3 publishers
- Builder
- Builder 32%
- Operator
- Operator 41%
- Investor
- Investor 27%
Reality
- Evidence60
- Adoption20
- Hype gap+20
- Incentives70
- Confidence65
TC39's iterator helpers are Baseline as of September 2026, so lazy chains run without a polyfill from Chrome 122 and Node 22 upward, while the teams reporting the 40-60% memory saving attached to them are unnamed.
Reality
- Evidence42
- Adoption48
- Hype gap+34
- Incentives38
- Confidence55
The add-on shipped to Mozilla's store as a dispatcher and took its instructions afterwards from a page it opened itself, on a domain built to resemble googleusercontent.com.
Reality
- Evidence62
- Adoption10
- Hype gap−10
- Incentives55
- Confidence58
Anthropic says Claude Mythos Preview found and exploited previously unknown flaws in every major operating system and web browser during a month of testing. Its disclosure process keeps the rest unnamed until patches ship.
Publishers:red.anthropic.com
Reality
- Evidence36
- Adoption20
- Hype gap+35
- Incentives78
- Confidence55
The packaged firejail profile allows a Mozilla directory that Firefox stopped using at version 150, so a jail that looks hardened opens a fresh empty browser every launch, ad blocker included in the loss.
Reality
- Evidence62
- Adoption10
- Hype gap+8
- Incentives20
- Confidence55
The September 16 partnership gives Firefox's beta assistant retrieval with sources, tab grouping and history previews, and each request only sees the tabs and history you grant it. Beta coverage is the US, Canada and France.
Reality
- Evidence38
- Adoption28
- Hype gap+18
- Incentives58
- Confidence42
The year's CVE tally has reached 66,401, close to double where it stood last September, and Microsoft alone patched 974 in a single month. Jerry Gamblin, who keeps the count, says more known bugs is mostly the system working.
Reality
- Evidence55
- Adoption45
- Hype gap+25
- Incentives45
- Confidence50
A single test on a Display P3 photo found the stripped copy looked duller with every pixel value unchanged, and re-saving at quality 100 recovered nothing; the frame mean moved under 3 ΔE while the most saturated pixels moved 5.4.
Reality
- Evidence64
- Adoption
- Insufficient
- Hype gap−8
- Incentives14
- Confidence58
Mozilla evaluated Mistral Small 4 on multilingual performance and shipped it into the Firefox Smart Window beta. Mistral gets consumer distribution without owning a browser, and the model stays switchable.
Perspective Coverage
7 publishers
- Builder
- Builder 33%
- Operator
- Operator 39%
- Investor
- Investor 28%
Reality
- Evidence62
- Adoption30
- Hype gap+28
- Incentives80
- Confidence70
One converted iPhone photo decoded in Playwright's WebKit and failed in Chromium and Firefox. A three-line createImageBitmap call tells an upload component which case it has before it draws the box.
Reality
- Evidence58
- Adoption22
- Hype gap+8
- Incentives35
- Confidence55
No major browser encodes AVIF from a canvas, and the spec says to hand back a PNG without throwing. The only support test that works is reading blob.type on the blob you get back.
Reality
- Evidence64
- Adoption25
- Hype gap+8
- Incentives40
- Confidence58
TLS inspection re-signs every connection with a root an administrator installed in the operating system trust store. Node, Python's certifi and Java's cacerts do not read that store, so one machine gives two different answers.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+12
- Incentives20
- Confidence55
Anthropic's red team says the scarce reverse-engineering skill that used to give defenders weeks is no longer the bottleneck. It measured that on Firefox and Windows kernel fixes, where a 19-day median gap counts as fast.
Reality
- Evidence55
- Adoption20
- Hype gap+22
- Incentives72
- Confidence48
Earlier coverage
- Longshot's print dialog hung on an img.decode() inside a display:none print subtree
Build · September 7, 2026 · 1 publisher
- Sysdig credits Anthropic's Mythos preview with 181 working Firefox exploits
Security · September 6, 2026 · 1 publisher
- Maintainers shipped 97 fixes against the 23,019 bugs Claude Mythos flagged
Security · September 3, 2026 · 1 publisher
- Firefox makes you name your extension's ID before AMO will take the package
Build · August 29, 2026 · 1 publisher
- Chrome's two-week release cycle will stack three browser majors inside one CrUX window
Build · August 28, 2026 · 1 publisher
- Vulnerability disclosures bent upward in 2026. Algorithm records did not.
Security · August 25, 2026 · 1 publisher
- The AliExpress homepage took the audio channel, and your app takes the support ticket
Product · August 24, 2026 · 1 publisher
- Socket turns on continuous scanning for all 97,100 Firefox add-ons
Build · August 20, 2026 · 1 publisher
- Mozilla's pitch against Gemini-wired Chrome is an off switch and a search deal with Exa
Invest · August 20, 2026 · 2 publishers
- CVE-2025-62593: A Ray Developer's Browser Is Now the Attack Surface
Security · August 19, 2026 · 1 publisher