roundcube webmail News Articles
Recent news articles refferecing the vendors vulnerabilities.
Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383) - Help Net Security
Attackers have exploited an XSS vulnerability (CVE-2024-37383) in the Roundcube Webmail client to target a governmental org of a CIS country.
Hackers exploit Roundcube webmail flaw to steal email, credentials
Threat actors have been exploiting a vulnerability in the Roundcube Webmail client to target government organizations in the Commonwealth of Independent States (CIS) region, the successor of the former Soviet Union.
Vulnerability Recap 10/21/24: Apple, Google Meet, Kubernetes
We keep seeing instances where threat actors exploit already-patched software. This is your weekly encouragement to patch your products now.

Hackers Exploiting Roundcube XSS Vulnerability To Steal Login Credentials
Security researchers have uncovered a new phishing campaign targeting users of the popular open-source Roundcube webmail software.
Unknown threat actors exploit Roundcube Webmail flaw in phishing campaign
Hackers exploited a patched Roundcube flaw in a phishing attack to steal user credentials from the open-source webmail software.