Russian Hackers Exploit Zero-Day Flaws in Windows and Firefox

A Russian state-sponsored group known as RomCom has been confirmed to exploit a zero-click cyber attack using two zero-day vulnerabilities in Mozilla Firefox and Windows, with severity ratings of 9.8 and 8.8, respectively. This attack installs a backdoor on Windows systems, primarily targeting sectors in Europe and North America. The vulnerabilities have been patched, but organizations are urged to update their systems promptly to mitigate risks. RomCom, also known as Storm-0978, has been active since at least 2022, engaging in espionage and cybercrime operations.