The Hacker News·Sep 17, 2025 highAPT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine#cve-2020-35730#cve-2021-44026#cve-2020-12641 4 min
Recorded Future·Aug 21, 2025 criticalBlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities#cve-2020-35730#cve-2023-23397#cve-2020-12641 3 min2
Help Net Security·Jun 10, 2025 criticalRoundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008)#cve-2024-42009#cve-2024-42008#cve-2024-42010 in the wild 3 min1
The Hacker News·May 22, 2025Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics#cve-2023-23397#cve-2020-12641#cve-2020-35730 4 min
The Hacker News·May 15, 2025 criticalRussia-Linked APT28 Exploited MDaemon Zero#cve-2020-12641#cve-2020-35730#cve-2021-44026 in the wild 4 min1
Security Affairs·May 12, 2024 criticalNATO and the EU formally condemned APT28 cyber espionage#cve-2023-23397#cve-2022-30190#cve-2020-12641 6 min1
Help Net Security·Feb 15, 2024 criticalRoundcube webmail XSS vulnerability exploited by attackers (CVE-2023-43770)#cve-2023-43770#cve-2020-35730#cve-2021-44026 in the wild1
Security Affairs·Feb 12, 2024 criticalCISA adds Roundcube Webmail Persistent XSS bug to its Known Exploited Vulnerabilities catalog#cve-2023-43770#cve-2020-35730#exploit in the wild 2 min
Security Affairs·Dec 8, 2023 criticalRussia's APT8 exploited Outlook 0day to target EU NATO members#cve-2023-23397#cve-2022-30190#cve-2020-12641 4 min
Kaspersky Securelist·Nov 14, 2023 criticalKaspersky Security Bulletin: APT predictions 2024#cve-2020-35730#cve-2020-12641#cve-2021-44026 15 min
Security Affairs·Oct 27, 2023 criticalANSSI warns of Russia#cve-2023-23397#cve-2022-30190#cve-2020-12641 3 min1
Security Affairs·Oct 26, 2023 criticalWinter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks#cve-2020-35730#cve-2022-27926#cve-2023-5631 2 min
The Hacker News·Oct 26, 2023 criticalNation State Hackers Exploiting Zero#cve-2020-35730#cve-2023-5631#exploit 2 min
Infosecurity Magazine·Oct 25, 2023 criticalWinter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers#cve-2020-35730#cve-2023-5631#exploit 2 min
The Record·Oct 25, 2023 criticalEspionage group uses webmail server zero#cve-2023-5631#cve-2020-35730#threat-actor 3 min
Help Net Security·Oct 25, 2023 criticalRoundcube webmail zero-day exploited to spy on government entities (CVE-2023-5631)#cve-2023-5631#cve-2020-35730#cve-2022-27926 2 min
The Hacker News·Jun 27, 2023 criticalMicrosoft Warns of Widescale Credential Stealing Attacks by Russian Hackers#cve-2020-12641#cve-2020-35730#cve-2021-44026 3 min
Security Affairs·Jun 25, 2023 criticalSecurity Affairs newsletter Round 425 by Pierluigi Paganini#cve-2023-20178#cve-2023-20887#cve-2023-27992 in the wild 3 min
Security Affairs·Jun 21, 2023 criticalAPT28 hacked Roundcube email servers of Ukrainian entities#cve-2020-35730#cve-2020-12641#cve-2021-44026 3 min