Hackers exploit Roundcube flaw to spy on academic researchers

Multiple high-impact security events and actively exploited vulnerabilities were reported across diverse sectors. China-linked actors exploited a Roundcube flaw to steal credentials and deploy backdoors at U.S./Canadian universities; Ruckus and Tenda networking devices were targeted or found with backdoors enabling device takeover; Ubiquiti UniFi OS and Adobe ColdFusion received maximum-severity fixes and urgent CISA patching orders; Langflow’s auth-bypass was flagged for immediate federal remediation. Major breaches and data exposures include Accenture and Japan’s KDDI (millions affected). A