Hackers exploit Roundcube flaw to spy on academic researchers

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal ...

Suspected Chinese snoops caught breaking into universities' Roundcube mailservers

Suspected Chinese spies have been breaking into major US and Canadian universities since May, exploiting vulns in Roundcube mailservers to steal data belonging to physics and engineering ...
techtimes

SharePoint Server Actively Exploited: CISA Orders Patch Before Ransomware Actors Strike

Federal agencies operating on-premises Microsoft SharePoint Server are under a hard patch deadline today — July 4, 2026 — after the U.S. Cybersecurity and Infrastructure Security Agency confirmed on ...
CSO Online

Hackers exploit critical PTC Windchill PLM software flaw

The popular product lifecycle management platform is under active exploitation for an RCE vulnerability that could put intellectual property in jeopardy.

Microsoft said exploitation was 'less likely' ... but CISA just added SharePoint RCE to KEV list

Microsoft's prediction that attackers probably wouldn't rush to exploit a newly-patched SharePoint bug hasn't aged especially ...
Windows Report

CISA Warns Microsoft SharePoint Flaw Is Actively Exploited

CISA added a Microsoft SharePoint RCE flaw to its exploited bugs catalog after confirming active attacks on unpatched servers ...
Infosecurity Magazine

Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers

A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and ...
SecurityWeek

CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability

CISA warns that attackers are exploiting Microsoft SharePoint vulnerability CVE-2026-45659, a high-severity remote code ...

7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.
Security Boulevard

CISA Sets Urgent Deadline to Fix Cisco Flaw Exploited in Attacks

What happened CISA added a Cisco Unified Communications Manager Server vulnerability to its Known Exploited Vulnerabilities catalog after the flaw was observed being exploited in attacks. The ...