Dozens of European orgs targeted by Russian attacks exploiting Roundcube flaws

At least 80 critical infrastructure, government, and military organizations across Europe, especially those in Ukraine, Poland, and Georgia, have been targeted by October attacks by Russian hacking operation TAG-70, also known as Winter Vivern, UAC-0014, and TA473, which involved the exploitation of cross-site scripting vulnerabilities impacting Roundcube email servers, SecurityWeek reports.

attacks cloud security critical critical infrastructure cross-site email europe exploitation exploiting flaws georgia government hacking infrastructure military october organizations poland roundcube roundcube email russian russian hacking scripting servers ta473 tag tag-70 uac ukraine vulnerabilities winter winter vivern