Firefox zero-day was used in attack against Coinbase employees, not its users
Article poses a good question. How did a privately reported zero-day leak from Bugzilla into an attacker's arsenal?Also, why did it take 2 months to fix an RCE? It's an RCE, not some XSS. I'd imagine this would be a high-priority. No?