A China-nexus threat actor has attacked Barracuda Networks’ Email Security Gateway appliances for the second time this year. The new attack involves an exploitation of a zero-day vulnerability in a third-party open-source software library. Unlike previous attacks, this issue was remotely rectified and required no action from customers. However, Barracuda warns of further threat activity and has initiated ongoing investigations. The company has also disclosed a second software vulnerability for public awareness that currently lacks remediation efforts.

Chinese Hackers Target European Diplomats with Malware
MirrorFace, a threat actor tied to Chinese cyberespionage, has expanded its activity outside East Asia, targeting a European organization with updated hacking tools. Researchers from