CVE-2024-42009: Critical Roundcube Cross-Site Scripting Vulnerability
CVE-2024-42009 is a critical cross-site scripting (XSS) vulnerability in Roundcube webmail with a CVSS score of 9.3. Exploitation requires the victim to…
Tag: email security
FortiMail: Email Security Solution
FortiMail is Fortinet's email security product that can flag phishing emails used in the Ousaban campaign.
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
A China-linked espionage group tracked as UNC6508 compromised REDCap research servers across North American medical, academic, and military institutions, stealing sensitive research…
Google Workspace Phishing Miss Rates
Google Workspace is a cloud productivity suite. IRONSCALES analysis indicates it misses 350 phishing messages per 100 mailboxes every 30 days, highlighting…
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Threat actors are actively exploiting a recently patched medium-severity information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is installed on…
Proofpoint: Cybersecurity and Compliance Solutions
Proofpoint is a cybersecurity company specializing in email security, threat intelligence, and compliance. Proofpoint assessed NovaCookies as a variant of the Sneaky…