There's a critical vulnerability in Firefox 3.5 and there are malicious sites actively exploiting the flaw in the wild.

Firefox 3.5.1 has been released to resolve the issue — update now, not later.