The Hacker NewsSep 17, 2025highAPT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine4 min readcve-2020-35730cve-2021-440262
Recorded FutureAug 21, 2025criticalBlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities3 min readcve-2020-35730cve-2023-233974
Help Net SecurityJun 10, 2025criticalRoundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008)Exploited3 min readcve-2024-42009cve-2024-420084
The Hacker NewsMay 22, 2025Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics4 min readcve-2023-23397cve-2020-126413
The Hacker NewsMay 15, 2025criticalRussia-Linked APT28 Exploited MDaemon ZeroExploited4 min readcve-2020-12641cve-2020-357302
Security AffairsMay 12, 2024criticalNATO and the EU formally condemned APT28 cyber espionage6 min readcve-2023-23397cve-2022-301901
Help Net SecurityFeb 15, 2024criticalRoundcube webmail XSS vulnerability exploited by attackers (CVE-2023-43770)Exploitedcve-2023-43770cve-2020-357302
Security AffairsFeb 12, 2024criticalCISA adds Roundcube Webmail Persistent XSS bug to its Known Exploited Vulnerabilities catalogExploited2 min readcve-2023-43770cve-2020-357301
Security AffairsDec 8, 2023criticalRussia's APT8 exploited Outlook 0day to target EU NATO members4 min readcve-2023-23397cve-2022-301901
Kaspersky SecurelistNov 14, 2023criticalKaspersky Security Bulletin: APT predictions 202415 min readcve-2020-35730cve-2020-126412
Security AffairsOct 26, 2023criticalWinter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks2 min readcve-2020-35730cve-2022-279262
The Hacker NewsOct 26, 2023criticalNation State Hackers Exploiting Zero2 min readcve-2020-35730cve-2023-56311
Infosecurity MagazineOct 25, 2023criticalWinter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers2 min readcve-2020-35730cve-2023-56311
The RecordOct 25, 2023criticalEspionage group uses webmail server zero3 min readcve-2023-5631cve-2020-357302
Help Net SecurityOct 25, 2023criticalRoundcube webmail zero-day exploited to spy on government entities (CVE-2023-5631)2 min readcve-2023-5631cve-2020-357301
The Hacker NewsJun 27, 2023criticalMicrosoft Warns of Widescale Credential Stealing Attacks by Russian Hackers3 min readcve-2020-12641cve-2020-357301
Security AffairsJun 25, 2023criticalSecurity Affairs newsletter Round 425 by Pierluigi PaganiniExploited3 min readcve-2023-20178cve-2023-208872
Security AffairsJun 21, 2023criticalAPT28 hacked Roundcube email servers of Ukrainian entities3 min readcve-2020-35730cve-2020-126411