Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Security Affairs reports multiple significant cybersecurity developments, including critical vulnerabilities in Barracuda Email Security Gateway and Android, a WordPress remote-code-execution flaw added to CISA's Known Exploited Vulnerabilities catalog, ransomware targeting outdated Synology NAS devices, major botnet activity involving Android set-top boxes, and attacks using social engineering, spyware, AI-assisted malware, and operational technology disruption. The highest-priority items are the actively exploited WordPress vulnerability, the critical Android remote-code-execution flaw, and,