The Russia-aligned threat actor known as RomCom has been linked to the zero-day exploitation of two security flaws, one in Mozilla Firefox and the other in Microsoft Windows, as part of attacks ...
Russian-based RomCom cybercrime group chained two zero-day vulnerabilities in recent attacks targeting Firefox and Tor Browser users across Europe and North America. The first flaw (CVE-2024-9680 ...
which means that the attackers couldn’t execute code on the underlying operating system with just the Firefox vulnerability alone. To escape the process sandbox, the RomCom attack exploited ...