@Tech,
At least you could always update to the latest java version. Pre-scan links where you wanna go to avoid java based exploits (kits) landing sites.
Use NoScript and RequestPolicy extensions in the firefox browser to prevent malscripts from running and third party requests being met.
Have the avast shields up and running. Only enable java in the browser when you need it, else do not allow it...
polonus