A critical Cross-Site Scripting (XSS) vulnerability, CVE-2024-57004, has been found in Roundcube Webmail version 1.6.9, allowing remote authenticated users to upload malicious files as email attachments. This flaw can lead to data theft, account compromise, and malware propagation. Users are advised to upgrade to version 1.6.10, which includes a patch for stricter input validation and security measures.
Surge in Infostealer Attacks Threatens EMEA Organizations
Check Point’s latest EMEA Cyber Threat Intelligence report highlights a 58% increase in infostealer attacks in Europe, the Middle East, and Africa over the past