Google and Mozilla patch high-severity browser vulnerabilities.

Summary

By the CyberWire staff

At a glance.

Google and Mozilla patch high-severity browser vulnerabilities.
DPRK's fraudulent IT worker operations expand to Europe.
Oracle hit with class-action lawsuit over alleged data breaches.

Google and Mozilla patch high-severity browser vulnerabilities.

Google and Mozilla both released new browser versions yesterday, fixing several high-severity memory safety vulnerabilities, SecurityWeek reports. Chrome 135 contains fourteen security fixes, including a use-after-free flaw (CVE-2025-3066) that could allow a remote attacker to "exploit heap corruption via a crafted HTML page." Google paid out a total of $18,000 in bug bounty rewards to the security researchers who discovered the flaws.

Firefox 137 fixes eight vulnerabilities, including three high-severity flaws (CVE-2025-3028, CVE-2025-3030, and CVE-2025-3034).

There's no evidence that any of the bugs are being exploited in the wild, but both companies urge users to update their browsers promptly.

Enhance Your Network Security with Zero Trust!

IT pros, are you ready to fortify your defenses? Discover ThreatLocker® Network Control, a powerful Zero Trust host-based firewall with dynamic ACLs. Gain full visibility, granular control, and advanced filtering to secure your network like never before. Learn how to stop breaches, implement microsegmentation, and integrate seamlessly with the ThreatLocker Platform. Download the whitepaper now and get the insights you need to enhance your organization’s defenses!

DPRK's fraudulent IT worker operations expand to Europe.

North Korea's fraudulent IT worker operations have expanded globally, with a notable focus on Europe, following a crackdown by the US Justice Department, according to Google's Threat Intelligence Group. These operations involve North Korean citizens obtaining remote jobs at foreign companies in order to generate revenue for Pyongyang. Google observed DPRK workers seeking employment in Germany, Portugal, the UK, and at least ten other European countries. The researchers also identified facilitators located in the UK, who helped the DPRK workers appear as though they were located in Europe.

Google notes, "In late 2024, one DPRK IT worker operated at least 12 personas across Europe and the United States. The IT Worker actively sought employment with multiple organizations within Europe, particularly those within the defense industrial base and government sectors. This individual demonstrated a pattern of providing fabricated references, building a rapport with job recruiters, and using additional personas they controlled to vouch for their credibility."

Many Voices. One Community.

Join Us at the RSAC 2025 Conference. Join us at RSAC, April 28 - May 1 in San Francisco and gain access to cybersecurity innovators, expert-led sessions, and hands-on workshops. Leave with new strategies, insights, and connections to elevate your cybersecurity journey.

Oracle hit with class-action lawsuit over alleged data breaches.

Oracle has been hit with a class-action lawsuit in Texas over alleged violations of the state's data breach notification laws, the Register reports. The case was filed by Floridian Michael Toikach and law firm Shamis & Gentile, accusing the company of "failures to implement reasonable and industry standard data security practices to properly secure, safeguard, and adequately destroy Plaintiff’s and Class Members’ sensitive personal identifiable information that it had acquired and stored for its business purposes."

Oracle hasn't commented on the suit.

Notes.

Today's issue includes events affecting Germany, the Democratic People's Republic of Korea, Portugal, the United Kingdom, and the United States.

Attacks, Threats, and Vulnerabilities

Royal Mail Group Loses 144GB to Infostealers: Same Samsung Hacker, Same 2021 Infostealer Log (InfoStealers) Just days after reporting on the Samsung Tickets data breach, another massive leak has surfaced, this time targeting Royal Mail Group, a British institution with over 500 years of history.

Products, Services, and Solutions

SolarWinds Unveils Next-Generation Solutions to Tackle Modern IT Operational Resiliency Challenges (SolarWinds) New capabilities integrate observability, incident response, service management, and AI automation capabilities designed to streamline IT and strengthen operational resilience

RSAC Expands Beyond Flagship Conference (RSAC) RSA Conference LLC (“RSAC”), RSA Conference LLC (“RSAC”), the company behind the world’s largest and most influential cybersecurity conference, today announced the rollout of a community-driven membership platform that enables the world’s cyber defenders to address the ever-evolving and escalating cybersecurity threat environment.

Legislation, Policy, and Regulation

Paris set to host difficult negotiations on tackling commercial hacking tools (The Record) This week in Paris, the diplomatic initiative formerly known as the Pall Mall Process will continue to look for international agreement on thorny issues related to hacking tools known as commercial cyber intrusion capabilities (CCICs).

Litigation, Investigation, and Law Enforcement

European Commission takes aim at end-to-end encryption and proposes Europol become an EU FBI (The Record) The Commission said it would create roadmaps regarding both the “lawful and effective access to data for law enforcement” and on encryption.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Newly Noted Events

Protecting CISOs From Increasing Personal Liability Risk-Civil & Criminal Insurance Considerations (Columbia, Mar, USA, Apr 17, 2025) An in-depth discussion of CISO Liability to include the following: · Increasing accountability and claims events and trends facing CISOs · How D&O and Cyber policies differ · How CISOs are covered under one or both policies · Risk Management and best practices to maximize the value of the D&O policy and optimize policy performance in a claims scenario.

Uniting Women in Cyber 2025 (Crystal City, Virginia, USA, Oct 9, 2025) UWIC is the premier event for cybersecurity leaders, professionals, and aspiring practitioners. Connect with a vibrant community focused on emerging global trends, technological advancements, and workforce development. Attend UWIC 2025 to learn, share ideas, and expand your professional network!

Events

WICYS 2025 (Dallas and Virtual, Texas, USA, Apr 2 - 5, 2025) WiCyS 2025 is the go-to event for cybersecurity professionals, students, and organizations. The conference is the flagship event to recruit, retain and advance women in cybersecurity.

40th Space Symposium (Denver and Virtual, Colorado, USA, Apr 7 - 10, 2025) Bringing together leaders from commercial, government and military space from around the world, the Space Symposium provides a forum to discuss, address and plan for future achievements in space. The Space Symposium program delivers exclusive networking and engagement opportunities with influential participants in one convenient and extraordinary venue. Space Symposium luncheons and dinners provide additional contact with influential participants.

Community Event with The Cyber Guild - Book Club (Reston, Virginia, USA, Apr 17, 2025) Join the growing Cyber Guild Community - "where everyone wants to know your name " The Cyber Guild community is a growing network of cyber enthusiasts who are invested in building a sustainable cyber ecosystem.

RSA Innovation Sandbox 2025 (San Francisco, California, USA, Apr 28, 2025) RSA Conference 2025 marks 20 years for cybersecurity’s top innovation startup competition: RSAC Innovation Sandbox contest. The contest puts the spotlight on cybersecurity’s boldest new innovators while highlighting their potentially game-changing ideas. Hundreds of submissions are reviewed and narrowed down to only 10 finalists. The Top 10 Finalists will take the stage during RSA Conference 2025 and will have three minutes to make their award-winning pitch to a panel of leading industry experts. Since the start of the contest, the Top 10 Finalists have collectively seen over 90 acquisitions and over $16.4 billion in investments.*

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.

Daily Briefing for 04.02.25

At a glance.

Google and Mozilla patch high-severity browser vulnerabilities.

DPRK's fraudulent IT worker operations expand to Europe.

Oracle hit with class-action lawsuit over alleged data breaches.

Notes.

Attacks, Threats, and Vulnerabilities

Products, Services, and Solutions

Legislation, Policy, and Regulation

Litigation, Investigation, and Law Enforcement

Newly Noted Events

Events