Join Sophos security experts Chester Wisniewski and Paul Ducklin as they tackle the latest security news in our weekly podcast.

This time: a password-stealing zero-day in Firefox; a "grab root privilege" hole in Android; a firmware worm for Macs...and prison for IRS scammers in the US.