Roundcube's four-month-old patch is now a live attack

A pre-authentication SQL injection in Roundcube webmail, patched in May, is now being exploited. What it says about patch gaps and least exposure, plus an OpenAI agent in Australia, TeamCity in ransomware attacks and a new UK disinformation centre. Sources BleepingComputer: Hackers now exploit critical Roundcube flaw in code injection attacks Canadian Centre for Cyber Security: Roundcube security advisory (AV26-503) Plesk Forum: When will Plesk update Roundcube to 1.6.16 / 1.7.1? ABC News: OpenAI hacked Medicare portal, Prime Minister Anthony Albanese says BleepingComputer: CISA says ransomware gangs now exploiting critical TeamCity flaw The Record: Burnham announces plan for new UK center to fight disinformation Read the written version