the following changes have been pushed to bugzilla.mozilla.org:
- [1197073] add support for 2fa using totp (eg. google authenticator)
- [1199136] security bug group moves for new core-security-release group
- [1199941] inactive sessions should expire faster (a week)
visit the ‘two-factor authentication‘ section under your user preferences to enable 2fa.
discuss these changes on mozilla.tools.bmo.