Mozilla patches a Firefox zero-day exploit that was discovered by Google's Project Zero and Coinbase's security teams, and it says was being abused in the wild
Mozilla releases Firefox 67.0.3 to fix actively exploited zero-day. — The Mozilla team has released earlier today version 67..3 …
Context & Ripple Effects
This is at least the fourth time in Mozilla's recent history that a Firefox flaw has been patched while under active attack. The lineage runs from the 2016 zero-day used to unmask Tor users, through the January 2020 memory-access flaw that could hand over control of machines, to the 2023 emergency update that also swept in Thunderbird. What distinguishes this June 2019 fix is who found it: alongside Google's Project Zero, Coinbase's own security team was on the discovery credit.
First-order effects
- Firefox users on versions before 67.0.3 are exposed to an exploit already being used in the wild, so the patch is an immediate-update event rather than routine maintenance.
- Whoever was running the exploit loses working access to patched browsers, forcing a switch to other attack surfaces or waiting for the next unpatched flaw.
Second-order effects
- Coinbase's role as co-discoverer signals that attackers are aiming browser exploits at cryptocurrency holders, pushing exchanges to keep investing in security teams that function as threat intelligence for the broader ecosystem.
- Google's Project Zero and exchange security teams together set the disclosure tempo for Mozilla, compressing the window between private report and emergency release.
Third-order effects
- If the pattern holds — Tor deanonymization in 2016, memory compromise in 2020, Thunderbird-wide fixes in 2023 — actively exploited Firefox zero-days become a recurring operational condition, normalizing out-of-band emergency releases as part of Mozilla's cadence.
- Browser vulnerabilities increasingly sit at the intersection of surveillance and financial crime, which strengthens the case for regulators and enterprises treating browser patch latency as a first-class security metric.
The trend: Actively exploited Firefox zero-days have shifted from government-style surveillance tooling toward financially motivated targets, with crypto-exchange security teams emerging alongside academic-style researchers as the discoverers who force Mozilla's emergency patches.