Cybercriminals are using a new version of Rhadamanthys Stealer called CopyRh(ight)adamantys in a widespread phishing attack, posing as legitimate companies and accusing individuals and organizations of copyright infringement. An email bait tricks victims into downloading malware which steals sensitive information. The attack, believed to be by a financially driven cybercrime group, underlines the need for vigilance against increasingly sophisticated phishing methods.
Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)
Microsoft has released fixes for 89 new security issues in its Patch Tuesday for November 2024. Two key vulnerabilities (CVE-2024-43451 and CVE-2024-49039), which are currently