browser security

Microsoft warns that ACR Stealer is using ClickFix lures to steal browser passwords, authentication tokens, Microsoft 365 files, and sensitive enterprise data.

A critical security vulnerability in Firefox and Firefox Extended Support Release (ESR) is actively being exploited in the wild. The flaw, tracked as CVE-2024-9680, has a high severity rating (CVSS 9.8) and allows attackers to execute remote code. Mozilla has issued an urgent advisory urging users to update their browsers immediately to safeguard against potential attacks.