Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-07 09:10 UTC
  • Importiert: 2026-07-13 11:58 UTC
  • CVSS: 9.3
  • Quelle-ID: thn_global
  • uid_hash: c9ba4d29d5e4cd890d8f12eda45fdaf4d9ce20ca1e3baf9098cf3872fa7d0c15

Inhalt

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign.

The activity involves the exploitation of now-patched, critical security flaws in the open-source email solution, such as CVE-2024-42009 (CVSS score: 9.3), to siphon credentials,

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2024-42009

CRITICAL

9.3

CRITICAL

9.3

2024-08-05

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews