Mozilla has rotated a GPG signing subkey used to authenticate release artifacts for Firefox and Thunderbird after an unencrypted copy of the previous subkey was unintentionally committed to a private GitHub repository. The affected signing infrastructure includes selected release files, such as Linux tarballs, RPM packages, and checksum files. Mozilla’s investigation into available audit logs […]
The post Mozilla Rotates Firefox and Thunderbird GPG Signing Key After Private GitHub Exposure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.