Threat Actors Target US and Canadian University Research Physicists Through Roundcube Vulnerabilities
NEOSEC enrichment — no mirror of the original source
Cyber threat actors with ties to China exploited critical vulnerabilities in the Roundcube open-source email client to gain access to university systems in Canada and the US. The attackers chained the two vulnerabilities — CVE-2024-42009, C
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Neely.
Linked advisories
Affected vendors and products
More on University
Other advisories
- CriticalCVE-2026-90817Vanderbilt University REDCap: Code-Injection
- Not ratedosv:CVE-2026-86213Mstfakts College-Management-System Search university.php mysqli_query sql injection
- MediumCVE-2026-1879Harvard University IQSS Dataverse: uneingeschränkter Dateiupload
- MediumCVE-2026-1879Harvard University IQSS Dataverse: uneingeschränkter Dateiupload
- Not ratedosv:CVE-2026-1879Harvard University IQSS Dataverse Theme Customization ThemeAndWidgets.xhtml unrestricted upload
- MediumCVE-2026-4474ItsourceCode University Management System: Cross-Site-Scripting (XSS)
- MediumCVE-2026-4474ItsourceCode University Management System: Cross-Site-Scripting (XSS)
- MediumCVE-2026-4356ItsourceCode University Management System: Cross-Site-Scripting (XSS)
Other news entries
- Technical University of Munich (TUM) IT security incident: myTUM passwords stolen, TUMonline taken offlineBreachpwn.watch
- Canadian Extradited to US Over Cryptomining Hacks on University SupercomputersNewsSecurityWeek
- Harvard University data breach exposed info of 851,000 accountsNewsBleepingComputer
- In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data LeakNewsSecurityWeek
- UNM Health ransomware attack disrupts patient care, surgeriesNewsBleepingComputer
- Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattackNewsThe Register — Security
- Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close ClinicsNewsSecurityWeek
- University of Copenhagen data breach exposes data of 525,000 peopleNewsBleepingComputer
ID