A zero-day vulnerability in Firefox is in the wild, and this appears to be almost the same vulnerability that appeared about three years ago, and this time is being targeted at Tor users. The vulnerability is being used to reveal Tor users' identity.

Firefox says it's working on a fix and in the meantime, Tor users should disable JavaScript, or not use Firefox for the time being.

[arstechnica.com...]