NoScript and other popular Firefox add-ons open millions to new attack

Unlike many browsers, Firefox doesn't always isolate an add-on’s functions and as a result are opening millions of end users to a new type of attack that can surreptitiously execute malicious code and steal sensitive data, a team of researchers reported.