Unnoticed Firefox attacker had access to severe vulnerabilities for over a year

An attacker with access to security-sensitive information about the Firefox web browser went unnoticed for as much as two years, putting hundreds of millions of users at risk.