<ul><li>The Russian RomCom group exploited Firefox and Tor Browser zero-day vulnerabilities in attacks on users in Europe and North America.</li><li>The first zero-day, tracked as CVE-2024-9680, is a use-after-free issue in Firefox Animation Timelines.</li><li>The second zero-day, CVE-2024-49039, is a Windows Task Scheduler privilege escalation flaw.</li><li>RomCom used the vulnerabilities to deploy a backdoor on victims' systems through a fake website.</li></ul>

Russian group RomCom exploited Firefox and Tor Browser zero-days to target attacks Europe and North America

Discover more