Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities

Multiple CyberScoop items report a range of high-impact activity: Proofpoint says a suspected China-linked espionage group used a Roundcube exploit chain to infiltrate U.S. and Canadian university physics and engineering departments in an ongoing campaign; researchers also observed exploitation of a critical Oracle E-Business Suite defect and Citrix released patches for a high-severity NetScaler flaw (CVE-2026-8451) reminiscent of prior widespread NetScaler exploits. Other notable items include the first documented case of agentic (AI-driven) ransomware, Pegasus infections of a PEGA committee‑