Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

A group of hackers believed to be aligned with China has been exploiting vulnerabilities in Roundcube webmail software used by universities in the US and Canada. The targeted institutions are primarily physics and engineering departments. The hackers are taking advantage of previously discovered and now patched security flaws, including one with a high severity score, to steal credentials. The campaign appears to be an attempt to gain unauthorized access to sensitive information. The vulnerabilities being exploited were previously addressed, indicating that the targeted universities may not have applied the necessary patches.