The Barracuda Email Security Gateway (ESG) appliance was found to have a vulnerability potentially exploitable by Chinese threat actor, UNC4841. The flaw, tied to a third-party library, ‘Spreadsheet::ParseExcel’, can lead to arbitrary code execution. This was used to deploy SEASPY and SALTWATER malware. Barracuda has patched the vulnerability and automatically applied the update to all ESG devices. The vulnerability has been classified as CVE-2023-7102, but its severity is yet to be categorized.
Startup OMass Secures $310M to Advance Drug for Rare Endocrine Disorder
OMass’s molecule is vying to become an alternative to a Neurocrine Biosciences drug that is currently the only FDA-approved therapy for congenital adrenal hyperplasia. But
