Socket found 40 malicious Firefox extensions posing as Web3 products to drain recovery phrases and private keys.
Nebula Security showed a single page load can break Tor Browser through a Firefox JIT flaw.